fb42a6ac6119df4c60c42330b3ba136a34c459c675392e02937f67539e66cd23 | Triage

Analysis

max time kernel
2s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
07/12/2022, 00:19

Sharing

Report Analysis Logs

General

Target

fb42a6ac6119df4c60c42330b3ba136a34c459c675392e02937f67539e66cd23.lnk
Size

523B
MD5

156a03d1be93d6d1e76a31e61f9dc69b
SHA1

395603558d64fd33f28a003484d80c007459937c
SHA256

fb42a6ac6119df4c60c42330b3ba136a34c459c675392e02937f67539e66cd23
SHA512

42bd9b5dbb3ffa6a50f73d95103f20447dcac15ac0ec8f86ea774d1c163b4c5baac0c2fdae7be9cd7561e8c3aca24c0d449100ea9fd5649929b6ef42fadb3696

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\fb42a6ac6119df4c60c42330b3ba136a34c459c675392e02937f67539e66cd23.lnk
1⤵
PID:960

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/960-54-0x000007FEFC631000-0x000007FEFC633000-memory.dmp

Filesize
8KB

Download