0e8b511975e6aed3f1c2da34c57153966c285110d435b82d2aa592acac088807 | Triage

Analysis

max time kernel
35s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30/11/2022, 23:10

Sharing

Report Analysis Logs

General

Target

0e8b511975e6aed3f1c2da34c57153966c285110d435b82d2aa592acac088807.lnk
Size

664B
MD5

d3e3fe7072e6711d337e9904b86ab972
SHA1

fbc01dd95164548824567251a0fae0e68e763dd4
SHA256

0e8b511975e6aed3f1c2da34c57153966c285110d435b82d2aa592acac088807
SHA512

2a5845a8f367ecd6ca5c457e89797c8826c9786ff857caa17d905d457354e1f5a0ac7ff39ddc86bb07d6d9e2306e624a6bd5a74aa65bdad183b00c0c411042bb

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\0e8b511975e6aed3f1c2da34c57153966c285110d435b82d2aa592acac088807.lnk
1⤵
PID:1504

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1504-54-0x000007FEFC141000-0x000007FEFC143000-memory.dmp

Filesize
8KB

Download