eb1563cdeb0587260ebf7520e6f5fb3b806e7129f1ebd232e40512f6e228d4a6 | Triage

Analysis

max time kernel
35s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07-12-2022 00:19

Sharing

Report Analysis Logs

General

Target

eb1563cdeb0587260ebf7520e6f5fb3b806e7129f1ebd232e40512f6e228d4a6.lnk
Size

543B
MD5

595bba120e42cd929fa987e4ede9e0e5
SHA1

4f206e4bcb0aeb7af8e6c3531571d41fb2ad630d
SHA256

eb1563cdeb0587260ebf7520e6f5fb3b806e7129f1ebd232e40512f6e228d4a6
SHA512

7a2fdcc826a7adc6821209187f47b6f866a33c8b4c1a6b632c38baf8dc6fbc89e12bba8c1db39015ed804071d537e46d9bc041088fad9d6872783a25c267c76a

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\eb1563cdeb0587260ebf7520e6f5fb3b806e7129f1ebd232e40512f6e228d4a6.lnk
1⤵
PID:1504

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1504-54-0x000007FEFC141000-0x000007FEFC143000-memory.dmp

Filesize
8KB

Download