9f8a878f09fe670c743eef7609473f6b520c77168297858eeb0f817aa6c73182 | Triage

Analysis

max time kernel
38s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03-11-2022 17:10

Sharing

Report Analysis Logs

General

Target

Document.lnk
Size

1KB
MD5

99c7e5bb423e23ad606d34a4c4b46cd3
SHA1

d022253a00c34758d1ee759bc0f0a68f5e541ff7
SHA256

dd0e805bf751f5569f995baf95c08d03737d0fe26bdc7981e245dbf881e6c2c2
SHA512

257ea0cb5e693d17bf0965f2d290e2d8b290b42b6f6ed4c3bf27b9d37c50205be1e0c558b6827ced94c9b2e1379595271dc73fc7a9d0d30c0197fce9e3d73acd

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Document.lnk
1⤵
PID:1364

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1364-54-0x000007FEFBC71000-0x000007FEFBC73000-memory.dmp

Filesize
8KB

Download