Analysis
-
max time kernel
150s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
30-11-2022 23:08
General
-
Target
6b799ff0bcc9233ed2d284c31db61151d8a994423036d46d2f3e34624fed8fa8.lnk
-
Size
667B
-
MD5
8432bc4b2f1fa859895b500cdb7bd878
-
SHA1
e96f0ec6edbf780c0415c690bf72431cb4a47a9f
-
SHA256
6b799ff0bcc9233ed2d284c31db61151d8a994423036d46d2f3e34624fed8fa8
-
SHA512
743c456ba4318d3ea07ca815a370d2c90571b17286a9c61416589602ba6ced13702496b6dac1f4aad781323d57d9cb085f2737dd34b064e7d63ba55cf0622f31
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\6b799ff0bcc9233ed2d284c31db61151d8a994423036d46d2f3e34624fed8fa8.lnk1⤵