8a0865c5bda5598c1e4686915fa7ee0c58dbd3c02b17bd9a02f1c866ec84af18 | Triage

Analysis

max time kernel
45s
max time network
50s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
01-12-2022 08:50

Sharing

Report Analysis Logs

General

Target

8a0865c5bda5598c1e4686915fa7ee0c58dbd3c02b17bd9a02f1c866ec84af18.lnk
Size

218B
MD5

856b77d90047a73472021270aa25276a
SHA1

c8bbc2c2c414faecfe042a7b73ec4ade558029e3
SHA256

8a0865c5bda5598c1e4686915fa7ee0c58dbd3c02b17bd9a02f1c866ec84af18
SHA512

097a97d613a50ffa4435260799134c47a4222af23c14dac29d2f435f5f5b90659107ec91ff62627dc95bbbd965f82006169ba07355fde3ccebbbae2735c65241

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\8a0865c5bda5598c1e4686915fa7ee0c58dbd3c02b17bd9a02f1c866ec84af18.lnk
1⤵
PID:1324

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1324-54-0x000007FEFC001000-0x000007FEFC003000-memory.dmp

Filesize
8KB

Download