362f95cf986b8077e482f1fd16ae10fd624725adda58f9b9bfbfcfd11db07e31

Analysis

max time kernel
119s
max time network
130s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01/01/2024, 03:12

Target

3bbd2f935be117be82683cf2d7f16acc.lnk
Size

1KB
MD5

3bbd2f935be117be82683cf2d7f16acc
SHA1

4b04be6975e730afe474e670ab595f02a22c35fc
SHA256

362f95cf986b8077e482f1fd16ae10fd624725adda58f9b9bfbfcfd11db07e31
SHA512

06f832c34526d241c7d18fffe32b683178d0a70517b5c8d455a544c110106e9b58247521ce39ef959a01a60d8401d7fc035dbbb6fe81d7dfb6d96a35e71ceab1

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 1744 wrote to memory of 2792	1744	cmd.exe	18
PID 1744 wrote to memory of 2792	1744	cmd.exe	18
PID 1744 wrote to memory of 2792	1744	cmd.exe	18
PID 2792 wrote to memory of 2688	2792	cmd.exe	20
PID 2792 wrote to memory of 2688	2792	cmd.exe	20
PID 2792 wrote to memory of 2688	2792	cmd.exe	20
PID 2792 wrote to memory of 2736	2792	cmd.exe	19
PID 2792 wrote to memory of 2736	2792	cmd.exe	19
PID 2792 wrote to memory of 2736	2792	cmd.exe	19

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\3bbd2f935be117be82683cf2d7f16acc.lnk
1⤵
- Suspicious use of WriteProcessMemory
PID:1744
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c set zz=Files.bat& cmd.exe /c %zz% > nul& cd Files& cmd.exe /c "Log.txt"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2792
- - C:\Windows\system32\cmd.exe
    cmd.exe /c "Log.txt"
    3⤵
    PID:2736
- - C:\Windows\system32\cmd.exe
    cmd.exe /c %zz%
    3⤵
    PID:2688

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact