4f6a9a6d46786ddfad3ec46994727eabfb471d0fc27f644f38e4c6980f610cdd | Triage

Analysis

max time kernel
42s
max time network
47s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
30/11/2022, 23:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4f6a9a6d46786ddfad3ec46994727eabfb471d0fc27f644f38e4c6980f610cdd.lnk
Size

678B
MD5

0c10ca41ea0fdd0e6210feb51cbf9763
SHA1

c5ca796aba9a88cc7eff87b093d51a64b2f7f626
SHA256

4f6a9a6d46786ddfad3ec46994727eabfb471d0fc27f644f38e4c6980f610cdd
SHA512

b3ce10f81fd3516f04f031e7a27dbf2c923322832fb5db38366d3c2b7be1f4952f955d4ab5ebfa6dabb33c52fa925c5e0d4c70528790fcea0ada0d9be6ef4c65

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\4f6a9a6d46786ddfad3ec46994727eabfb471d0fc27f644f38e4c6980f610cdd.lnk
1⤵
PID:1740

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1740-54-0x000007FEFB621000-0x000007FEFB623000-memory.dmp

Filesize
8KB

Download