6bbe5ec4ef4b6cef0e366af4b49882547695a59fea4cd485c5ae85784e0ce4cb | Triage

Analysis

max time kernel
219s
max time network
332s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
30/11/2022, 23:08

Sharing

Report Analysis Logs

General

Target

6bbe5ec4ef4b6cef0e366af4b49882547695a59fea4cd485c5ae85784e0ce4cb.lnk
Size

682B
MD5

b97d4e05e2a487906e04eb6b0d0f2f08
SHA1

9ab78628b2084cc590be7efc57df0d5b9f0c4ed3
SHA256

6bbe5ec4ef4b6cef0e366af4b49882547695a59fea4cd485c5ae85784e0ce4cb
SHA512

d63db7e3961c60cd9d07864b1e14dd6e5b634edb3308b8b704656fe99adb36e2321fae897b0c9b43d8da672953d60580d20676a4ddbdb2189589a262643b7a8d

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\6bbe5ec4ef4b6cef0e366af4b49882547695a59fea4cd485c5ae85784e0ce4cb.lnk
1⤵
PID:672

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/672-54-0x000007FEFBCE1000-0x000007FEFBCE3000-memory.dmp

Filesize
8KB

Download