4fba6477bfa8cf27f705f5f996cdce802ac9f03d44f45f83f2de47a905692c88 | Triage

Analysis

max time kernel
28s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/02/2023, 06:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

TLauncher.lnk
Size

1KB
MD5

5ba603df5b26b7786af0a423aa988ae8
SHA1

4c119ea77d3b2329f7e486ded8fe2d049e5ee55b
SHA256

4fba6477bfa8cf27f705f5f996cdce802ac9f03d44f45f83f2de47a905692c88
SHA512

d773a47d816bb5a5afb62b6f04abbcb3d8a00e267eb0aa5454d214ef3e276bc4e2b08d1bfec43da7807b0f6fc8e43392596ac36b1504a4da8ffdf388d498a842

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\TLauncher.lnk
1⤵
PID:1228

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1228-54-0x000007FEFBCE1000-0x000007FEFBCE3000-memory.dmp

Filesize
8KB

Download