ad5ff81c1b05a2dcdf95088cb8b92c2be127f358a53b0f4978d3f0c682d43284 | Triage

Analysis

max time kernel
36s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/12/2022, 00:17

Sharing

Report Analysis Logs

General

Target

ad5ff81c1b05a2dcdf95088cb8b92c2be127f358a53b0f4978d3f0c682d43284.lnk
Size

521B
MD5

ec7518f89725dcee401b56a4a576cb34
SHA1

5dcf00d1d07222db67e8a374ce98701a93b2c4de
SHA256

ad5ff81c1b05a2dcdf95088cb8b92c2be127f358a53b0f4978d3f0c682d43284
SHA512

4088ba4850ecedf0c687f4be3dd8985d5936929bf63369f7157c7ec4b810058cd1a51d7f2a442e894238fd105a12379bf2946d15a3a803609550e3f4a61d8435

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\ad5ff81c1b05a2dcdf95088cb8b92c2be127f358a53b0f4978d3f0c682d43284.lnk
1⤵
PID:1928

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1928-54-0x000007FEFC161000-0x000007FEFC163000-memory.dmp

Filesize
8KB

Download