9ab8b51a9921537df38a6414cf3f6a4cfe111f29944ac3f0e238d164501060f0 | Triage

Analysis

max time kernel
36s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 15:33

Sharing

Report Analysis Logs

General

Target

9ab8b51a9921537df38a6414cf3f6a4cfe111f29944ac3f0e238d164501060f0.lnk
Size

707B
MD5

14fb3be5ab7b556e8948780cba0f9b5e
SHA1

42ffea93c91e8608d7bfbda4edfbbb328ffb305a
SHA256

9ab8b51a9921537df38a6414cf3f6a4cfe111f29944ac3f0e238d164501060f0
SHA512

66f1819cb16e2f4839f521f4bb0dcbf7433d3429a4abae8469a888f25ca1075eae81a4927b19bdd38ca5d73a8bb2f54d93bcb72f709595832b444b7aab3d8612

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\9ab8b51a9921537df38a6414cf3f6a4cfe111f29944ac3f0e238d164501060f0.lnk
1⤵
PID:960

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/960-54-0x000007FEFBAC1000-0x000007FEFBAC3000-memory.dmp

Filesize
8KB

Download