184dab6cb09e00b7a3d6cb74609b53dd162e3714a767754881ff92d7846dd1d8 | Triage

Analysis

max time kernel
91s
max time network
110s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04/11/2022, 01:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

SS.lnk
Size

1KB
MD5

280e41809f2cb98237645e4baf5f505d
SHA1

5bcee4d3d76f6311ab695d6805cb21df95bcae2f
SHA256

70176f6610e4a55ea17064a90320e0602125c945cd539ce85e0def4d1066fe87
SHA512

da82dd6c67cee43a32a34ccdbac58b6f977d2f9a34ce41c237c8208dcbe3521241e2ad3ef6c068e1df4eb2596eacf9defeaf51dd7578d977bf144af754c6d3bd

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\SS.lnk
1⤵
PID:4972

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads