a06c213833ae57fff7d9c67495e6430f6a9f89f5950b2806da8df0753a0e20e4 | Triage

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
04-11-2022 05:43

Sharing

Report Analysis Logs

General

Target

SS.lnk
Size

1KB
MD5

5b1c4e4935fd5b0778f314fb37d36ea0
SHA1

0a7c2c474d8c178a4188ae185ae3ad611bef792a
SHA256

7fdc7b226e9e304b955c4707e7adfe053997494e62eff72802b87dace00f50bc
SHA512

aa5c0ec8007eb75b10c001c5d63ddbe356ddab69c2135dd1a2a42541a0afbdb88af5a0ddfe18fe9591d5dbede663abc52608c60c523768d8de8ec540cb75fb7c

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\SS.lnk
1⤵
PID:1932

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1932-54-0x000007FEFB7B1000-0x000007FEFB7B3000-memory.dmp

Filesize
8KB

Download