Analysis
-
max time kernel
163s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
30-11-2022 23:06
General
-
Target
cec9e4b15c3abf12dff6983f7e00caa5ae515ff13ad41138173c5a3601c05e17.lnk
-
Size
653B
-
MD5
fde6a5122c8220d83d417fe3a47df8b9
-
SHA1
5cb44165e626403b5144b1c6c604bf670eb47b65
-
SHA256
cec9e4b15c3abf12dff6983f7e00caa5ae515ff13ad41138173c5a3601c05e17
-
SHA512
bf0fc53423fc75061406a67fba3e0d5df838e59f235ccbf94b781a6ec822ff0f2a87afc990a611c7988598d2371697e3c1a7a6b8ec40bc6d430ed7e3c5e1e992
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\cec9e4b15c3abf12dff6983f7e00caa5ae515ff13ad41138173c5a3601c05e17.lnk1⤵