6cc0505bc3d39f9806d605ba115dd302da1f485554ec44c9c96286f5ea34d909 | Triage

Analysis

max time kernel
66s
max time network
74s
platform
windows10-1703_x64
resource
win10-20220812-en
resource tags

arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
submitted
05-02-2023 01:39

Sharing

Report Analysis Logs

General

Target

Srenshare tool/Tools/Process Hacker 2.lnk
Size

1KB
MD5

4a5c54b5a08d11f84154b9945097bf52
SHA1

f68c6095eccbeb2efb3164ca3e3176c8f5aa0d8b
SHA256

407b8951924e55136c90ea13db95d3307f2652ea52d93e2d4ad44af9346b5362
SHA512

ee53c45b77bdd14a5d8a8ed0d9c530555ffd20a31aebecd8e29b9cbcf6dc3b02e3aeb704e42dfb892d01df6a11ca04738900a037a295c4d9ea13fea2ce571978

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Srenshare tool\Tools\Process Hacker 2.lnk"
1⤵
PID:2672

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...