08352ae7d4bcb61f1becc4e71080ae13a286fd693ea47cb17d5637b628a91d18 | Triage

Analysis

max time kernel
40s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/12/2022, 00:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

08352ae7d4bcb61f1becc4e71080ae13a286fd693ea47cb17d5637b628a91d18.lnk
Size

523B
MD5

500f8db6c75c274184628c41ac274d65
SHA1

17ea2750a963552f888411fea1e75726a3c7ea5a
SHA256

08352ae7d4bcb61f1becc4e71080ae13a286fd693ea47cb17d5637b628a91d18
SHA512

07e532feb01ef3b1f5626563c03e60c86c992247169526c2e0dacd4de36b9cf04e3c87064e59f9eaca3128b0fbd048e570a50d97aedd7fce5d59e1bc9269f32a

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\08352ae7d4bcb61f1becc4e71080ae13a286fd693ea47cb17d5637b628a91d18.lnk
1⤵
PID:1280

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1280-54-0x000007FEFB931000-0x000007FEFB933000-memory.dmp

Filesize
8KB

Download