c594ef0c120ff0e69292811a32bd2f475f8547abefaf6e81daa18925defb0321 | Triage

Analysis

max time kernel
9s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 08:49

Sharing

Report Analysis Logs

General

Target

c594ef0c120ff0e69292811a32bd2f475f8547abefaf6e81daa18925defb0321.lnk
Size

200B
MD5

bb614b1cf9d2e0862e27c70c68400784
SHA1

f723aa217bbea9853a2df49e65589fa93cea0b5d
SHA256

c594ef0c120ff0e69292811a32bd2f475f8547abefaf6e81daa18925defb0321
SHA512

9051db6c69bf0044b0cc277868625251bf25dbc13e4c09b1a4706047bcd95d55e745dab1a3887949048043de6e706e6ec5aae82d1a467c40c6d6bb568424da28

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\c594ef0c120ff0e69292811a32bd2f475f8547abefaf6e81daa18925defb0321.lnk
1⤵
PID:948

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/948-54-0x000007FEFB641000-0x000007FEFB643000-memory.dmp

Filesize
8KB

Download