3daa5f603e03efe1461c651bd7190fb6fcaad36bd7b317bb7ecab3051d6e0335

Analysis

max time kernel
158s
max time network
180s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01/01/2024, 11:16

Target

3cb439a8445c3804a8d0751bcf3032ba.lnk
Size

856B
MD5

3cb439a8445c3804a8d0751bcf3032ba
SHA1

abae5e606cbc48b87ae018b438bfb8561807ee1b
SHA256

3daa5f603e03efe1461c651bd7190fb6fcaad36bd7b317bb7ecab3051d6e0335
SHA512

9cb8b3b05f2711c55d619df71eb533667ab127078eb8e327852a9d00c8dd7dbd4e6a06a2639c8d01e510d70316a3cdf17341506c5c72990ad934bed637ec8c38

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4796	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\3cb439a8445c3804a8d0751bcf3032ba.lnk
1⤵
- Suspicious use of FindShellTrayWindow
PID:4796

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact