260f4908ed35b9a7c82ee7189548989133231cc2d2843bc56e8a8071ca918013 | Triage

Analysis

max time kernel
37s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/11/2022, 10:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

260f4908ed35b9a7c82ee7189548989133231cc2d2843bc56e8a8071ca918013.lnk
Size

961B
MD5

270c299f13c83d31c864f2eb16ab6310
SHA1

dca066c99c7c9b6dd6ba11e1633cddfca0355b90
SHA256

260f4908ed35b9a7c82ee7189548989133231cc2d2843bc56e8a8071ca918013
SHA512

76052a882ac94b02e7e0588e75553770a5a23b9ae4150c557e7d316400277c788ff56fdd9d954ef768ba8f2b2b08b4f53f5eec68964ba6781c31f06c2b998432

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\260f4908ed35b9a7c82ee7189548989133231cc2d2843bc56e8a8071ca918013.lnk
1⤵
PID:1488

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1488-54-0x000007FEFC431000-0x000007FEFC433000-memory.dmp

Filesize
8KB

Download