e6a2e75a6b2a3f2ac324ed063728d53dd0ff40e24e2abe11a725c41a54aabfe9 | Triage

Resubmissions

11-11-2022 10:35

221111-mm1n8ahd3z 10

11-11-2022 05:40

221111-gcv34ahed6 10

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11-11-2022 05:40

Sharing

Report Analysis Logs

General

Target

Document.lnk
Size

1KB
MD5

5285072bd147d8b3c46337442c45d6f6
SHA1

aa69b57e188a84f02dff41b3bb9f5d3185d6d21d
SHA256

2709e19c5241ec78b7852bcd78498884a2a1147e0273a194fd235f62cdc786cc
SHA512

2cc1ec6077e937ad2f35f397c6ca72add62ed5d1f2ae5dd77520c87179ec879239fe8fd5f9fddd2ae73fb1b964afc3e442f9173f6df94ff541cf2bb763aa6899

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Document.lnk
1⤵
PID:1652

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1652-54-0x000007FEFBB81000-0x000007FEFBB83000-memory.dmp

Filesize
8KB

Download