Analysis
-
max time kernel
146s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 15:33
General
-
Target
9ab8b51a9921537df38a6414cf3f6a4cfe111f29944ac3f0e238d164501060f0.lnk
-
Size
707B
-
MD5
14fb3be5ab7b556e8948780cba0f9b5e
-
SHA1
42ffea93c91e8608d7bfbda4edfbbb328ffb305a
-
SHA256
9ab8b51a9921537df38a6414cf3f6a4cfe111f29944ac3f0e238d164501060f0
-
SHA512
66f1819cb16e2f4839f521f4bb0dcbf7433d3429a4abae8469a888f25ca1075eae81a4927b19bdd38ca5d73a8bb2f54d93bcb72f709595832b444b7aab3d8612
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\9ab8b51a9921537df38a6414cf3f6a4cfe111f29944ac3f0e238d164501060f0.lnk1⤵