6cc0505bc3d39f9806d605ba115dd302da1f485554ec44c9c96286f5ea34d909 | Triage

Analysis

max time kernel
41s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05-02-2023 01:36

Sharing

Report Analysis Logs

General

Target

Srenshare tool/Atajos/Elementos recientes.lnk
Size

1KB
MD5

37ce2443e62c43d604b8b054aa8be9f5
SHA1

b89a7ab20d266d719f8a4ad90fdcf3553274d63f
SHA256

1c12279f54c4c0ab77f3fc721620b2d93ce111ad4bdc725e5ba464f179440e5b
SHA512

3b39bfe4231a1c30f0828a9a99d1b5ba3644fba0246c7dae8d6dbf53f53f75176104b9c0522ac909312cdbc782584309c2161728d3a0620d7e9a890d4230f0bf

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Srenshare tool\Atajos\Elementos recientes.lnk"
1⤵
PID:1624

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1624-54-0x000007FEFBB81000-0x000007FEFBB83000-memory.dmp

Filesize
8KB

Download