Overview

overview

7

Static

static

1

3 - Опт...ar.url

windows7-x64

1

3 - Опт...ar.url

windows10-2004-x64

1

3 - Опт...е.cmd

windows7-x64

1

3 - Опт...е.cmd

windows10-2004-x64

1

3 - Опт...е.cmd

windows7-x64

5

3 - Опт...е.cmd

windows10-2004-x64

5

3 - Опт...а.lnk

windows7-x64

3

3 - Опт...а.lnk

windows10-2004-x64

7

3 - Опт...CI.lnk

windows7-x64

3

3 - Опт...CI.lnk

windows10-2004-x64

3

3 - Опт...CI.lnk

windows7-x64

3

3 - Опт...CI.lnk

windows10-2004-x64

3

3 - Опт...11.lnk

windows7-x64

3

3 - Опт...11.lnk

windows10-2004-x64

7

3 - Опт...а.url

windows7-x64

1

3 - Опт...а.url

windows10-2004-x64

1

3 - Опт...м.url

windows7-x64

1

3 - Опт...м.url

windows10-2004-x64

1

3 - Опт...и.url

windows7-x64

1

3 - Опт...и.url

windows10-2004-x64

1

3 - Опт...б.url

windows7-x64

1

3 - Опт...б.url

windows10-2004-x64

1

3 - Опт...х.url

windows7-x64

1

3 - Опт...х.url

windows10-2004-x64

1

3 - Опт...ь.lnk

windows7-x64

3

3 - Опт...ь.lnk

windows10-2004-x64

7

3 - Опт...ы.lnk

windows7-x64

3

3 - Опт...ы.lnk

windows10-2004-x64

7

3 - Опт...я.lnk

windows7-x64

3

3 - Опт...я.lnk

windows10-2004-x64

3

3 - Опт...LC.exe

windows7-x64

1

3 - Опт...LC.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 17:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    3 - Оптимизация Windows/16 - Отключаем VBS _ HVCI.lnk

  • Size

    1KB

  • MD5

    cf1faccf6bb38b9adc7004c7f71797ea

  • SHA1

    3d894b53c2b04049fc6aef4868697952fb13cc29

  • SHA256

    87884a3192ff44956bde5c9271d667c4420c9936dad1c09eb69d872c08258298

  • SHA512

    1bc7a62fc27eeaf63362a770c5e12b7b44aa0413e977a797f1bec405ec75c2b8aab9e8078941db82093799f9e1813d861a0998082e2b74a082dff41383835c60

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\3 - Оптимизация Windows\16 - Отключаем VBS _ HVCI.lnk"
    1⤵
    • Modifies registry class
    PID:4692

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads