4855a3d93bd6b13957c8123f97f2751c76b4371ba2a3ccf0655306944004b69f

Analysis

max time kernel
166s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 02:42

Target

24e350a1fce370d32e317ec37615a595.lnk
Size

943B
MD5

24e350a1fce370d32e317ec37615a595
SHA1

7d2884771dd525ee0b616036d55e22b9916a83e5
SHA256

4855a3d93bd6b13957c8123f97f2751c76b4371ba2a3ccf0655306944004b69f
SHA512

051664f886454da1a7a66d887051841fb9729ef08cf8fbe2bb83ff79b26e4117996c695b734f30ad51784737ff53b86f8319b1b8cc358eae0b5dd39171c51045

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1112	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\24e350a1fce370d32e317ec37615a595.lnk
1⤵
- Suspicious use of FindShellTrayWindow
PID:1112

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact