994aec02317e97942661ef7ff7859e146698e312d88c91aaee5d4b224afa7996 | Triage

Analysis

max time kernel
91s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02-11-2022 16:34

Sharing

Report Analysis Logs

General

Target

Contract.lnk
Size

1KB
MD5

5aa6cfd6b22cfe637b880f3f0f5b8c7b
SHA1

bd765786f3e9b19bc5cff9e7394b0a3107d0a6b2
SHA256

3a28e7c17d8a98365d8d09c52cfc5f770688559f451031064adf4842a6ceeae6
SHA512

7df4c833d312738ca3c06d1148b903197ed3be77532e06db08d2d62b477b517e3c424a6820d353cd77866a4d32daf6e9d6553a7f3dd9ce3c66964e4e1b59f11c

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Contract.lnk
1⤵
PID:5016

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...