674d4a54c8d1cb4e6a89aa4f42534ef5201fd7ff8c54b5b3dddf50964e65de90 | Triage

Analysis

max time kernel
230s
max time network
333s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
07/12/2022, 00:22

Sharing

Report Analysis Logs

General

Target

674d4a54c8d1cb4e6a89aa4f42534ef5201fd7ff8c54b5b3dddf50964e65de90.lnk
Size

515B
MD5

5742de429eacb195a858d88f739d124d
SHA1

845475e6d9295fc86b0704160dbc76b4b0c7b165
SHA256

674d4a54c8d1cb4e6a89aa4f42534ef5201fd7ff8c54b5b3dddf50964e65de90
SHA512

799e407dfb393081b965e8a4df07cdd9e6fe73c10ec7c0e8dac4aeff6d5ba1f206433bf70075f9a93c55cbdc5d9c4a636da0984098d6ad8e76e4b85a656d83d4

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\674d4a54c8d1cb4e6a89aa4f42534ef5201fd7ff8c54b5b3dddf50964e65de90.lnk
1⤵
PID:1032

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1032-54-0x000007FEFB641000-0x000007FEFB643000-memory.dmp

Filesize
8KB

Download