3f60099e73d0843cf4a8cb8e4cc2b246db8f0a492824de74f6ac320abd1b7ab0 | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 20:45

Sharing

Report Analysis Logs

General

Target

11c842df027d96448171e4f5e9cc7069.lnk
Size

252B
MD5

11c842df027d96448171e4f5e9cc7069
SHA1

16736ef5fbad135ec1e987714ca30de250b42c56
SHA256

3f60099e73d0843cf4a8cb8e4cc2b246db8f0a492824de74f6ac320abd1b7ab0
SHA512

4156488ae878944ad288adc2195158495e40234ca090da7889e48afbf94519d4b8e120ae0ca9bb4d5952aa03c2944962dd5b601d289004ea8cf2f1fd3ab0b1ea

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\11c842df027d96448171e4f5e9cc7069.lnk
1⤵
PID:1820

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1820-35-0x0000000002D00000-0x0000000002D01000-memory.dmp

Filesize
4KB

Download