99482cc76a3f020bbca4609e4b4d39e3577543443898941b916079dc9b738fb3 | Triage

Analysis

max time kernel
107s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02-11-2022 18:59

Sharing

Report Analysis Logs

General

Target

Offer.lnk
Size

1KB
MD5

df5f90b662e0ad2e52061ca89562284b
SHA1

c08d3e8d7f02e170184425e78d5602613cbd2ecb
SHA256

dea6d1eb9258bc14935feb2d42559809fc201e16699cc717a2c362e51bd52dff
SHA512

083e9763c0a125bd284e255121fa0891c340cd2ee9e56a7b01dc56ae3e76268ee65708c0281ef00b15ce3ac22c5d502a2f95dfdb9c2c57929b65bad07e080517

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Offer.lnk
1⤵
PID:2264

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads