071cf85b0f25270a9063a590ded2f3b4c4a6f91a0a177f00bb8a338bb05d0ca2 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
07/01/2024, 12:54 UTC

Sharing

Report Analysis Logs

General

Target

Telegram.lnk
Size

1KB
MD5

e0eaa72ec3d4af807cb001587734c5c8
SHA1

67fbb6d10eae10906bcbe3592ecb6c46cda79a23
SHA256

071cf85b0f25270a9063a590ded2f3b4c4a6f91a0a177f00bb8a338bb05d0ca2
SHA512

ce029032a1f96f820a25fd072d7c07bbce601b15abf53bec33b033b9d2a07ebc41b0d4f518b513ab1bcf0cedcee9fc948cad13f3204d9ec9a9600e05f97f8f5f

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Telegram.lnk
1⤵
PID:804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads