9749b2391828ae14698aa2a05efa9e1e4d83096594499c00cd9626c58fcc1d6c | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/02/2023, 03:00 UTC

Sharing

Report Analysis Logs

General

Target

Salwyrr Launcher.lnk
Size

2KB
MD5

32bbd30dce8af51b89d8ed1f14d8475f
SHA1

786f96a1b7f31ac9a72f2664b2d51ba88ddbfdce
SHA256

9749b2391828ae14698aa2a05efa9e1e4d83096594499c00cd9626c58fcc1d6c
SHA512

04d8a4d7d82f75b994a7b0829889cfc1d93f40bbc52dedb7826e3c0379e86544b10f614dffd0421998aceaf5413b438fb95116cdf825d41e36e36bd09d19a0d6

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Salwyrr Launcher.lnk"
1⤵
PID:1168

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1168-54-0x000007FEFC341000-0x000007FEFC343000-memory.dmp

Filesize
8KB

Download