5e06a3d8f39985fa8a4bb6a8d13749997eaacf410a79f3543cf37e64b14e9912 | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 15:09

Sharing

Report Analysis Logs

General

Target

5e06a3d8f39985fa8a4bb6a8d13749997eaacf410a79f3543cf37e64b14e9912.lnk
Size

208B
MD5

0d5d861b3856cc87a92143de050282b0
SHA1

28c38f3014e992ca88a1a2469bd073490fe2f858
SHA256

5e06a3d8f39985fa8a4bb6a8d13749997eaacf410a79f3543cf37e64b14e9912
SHA512

1309f3bbcc5e0dbd412014ba8201400985c236565efdc54556b94f897d2a4e849e3c8534ae10c1666983c557213b2fbf68be6ca14d6ef416c813271bdd993e34

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\5e06a3d8f39985fa8a4bb6a8d13749997eaacf410a79f3543cf37e64b14e9912.lnk
1⤵
PID:1404

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1404-54-0x000007FEFB8A1000-0x000007FEFB8A3000-memory.dmp

Filesize
8KB

Download