55662e3c6bb8703a74c503651de99bc964f1627470474a66e2b69ed7fae820c0 | Triage

Analysis

max time kernel
27s
max time network
31s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
26-03-2023 15:12

Sharing

Report Analysis Logs

General

Target

Project64 1.6.lnk
Size

2KB
MD5

542480e70215555ea8d6ce1c5d5913f5
SHA1

61fb2fa3ffbe75df49284eb708f91361aa900678
SHA256

55662e3c6bb8703a74c503651de99bc964f1627470474a66e2b69ed7fae820c0
SHA512

4afa860ea49d4d974176585603249d1a2f7744cad2169a2436b46f9aa4e0e4a0a0109c2d7a89d7b5eb07f4f930a931859d94f8026bcac66fbe0fe80e6346b040

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Project64 1.6.lnk"
1⤵
PID:1724

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:1488

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads