441dd1997a39bcd3464cdcdbd33085b619ea0dd68a3533076bbaff49dc646e5b | Triage

Analysis

max time kernel
92s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-11-2022 23:09

Sharing

Report Analysis Logs

General

Target

441dd1997a39bcd3464cdcdbd33085b619ea0dd68a3533076bbaff49dc646e5b.lnk
Size

624B
MD5

a9154da03fe9f2cc7c0d5d309a21d1fd
SHA1

cf67c592b7864aad214c23da8b4d5483f0f3367e
SHA256

441dd1997a39bcd3464cdcdbd33085b619ea0dd68a3533076bbaff49dc646e5b
SHA512

cbc1c3271dadcfa6332adc384641e23d786c55428e5058870c779d3314cd3f21510419abb2fd991ab8af656196f00032da3cfa4cf9c2716fa68d40748bbea10d

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\441dd1997a39bcd3464cdcdbd33085b619ea0dd68a3533076bbaff49dc646e5b.lnk
1⤵
PID:4284

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads