7d5956bfb4afdfbadac7263b0e3b49ce4a5300e5dc66ef41e3eadeaeab9fb01c | Triage

Analysis

max time kernel
46s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 21:23

Sharing

Report Analysis Logs

General

Target

7d5956bfb4afdfbadac7263b0e3b49ce4a5300e5dc66ef41e3eadeaeab9fb01c.lnk
Size

210B
MD5

4fb3f033e251df7bd1d015c3ae6bc8a0
SHA1

dfbb806e4247a8b7bd938507229cb743b1e42f0d
SHA256

7d5956bfb4afdfbadac7263b0e3b49ce4a5300e5dc66ef41e3eadeaeab9fb01c
SHA512

5f95530a0620b9a56cdc488731fe9f91831e92c18d1e61a5fb101d70cd170c5364ed783122e61c74d8b6b312978d5de530c97c583944f6b58fa3dbbebbe062f4

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\7d5956bfb4afdfbadac7263b0e3b49ce4a5300e5dc66ef41e3eadeaeab9fb01c.lnk
1⤵
PID:1768

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1768-54-0x000007FEFC591000-0x000007FEFC593000-memory.dmp

Filesize
8KB

Download