ff126cfb27e140835a53c7a70d76b3feb48aa38e4c8460c6e21a969d1f49d1ef

Analysis

max time kernel
151s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11/01/2024, 13:45

Target

53ad7b673b1d8104c14c1bdbb7703e42.lnk
Size

856B
MD5

53ad7b673b1d8104c14c1bdbb7703e42
SHA1

6712631fe8c08ec9a54bb8c2aab46aae3a01b1a4
SHA256

ff126cfb27e140835a53c7a70d76b3feb48aa38e4c8460c6e21a969d1f49d1ef
SHA512

59b2ecc640bc447bcf7dd26ad477d6591b828ab3837ae90dee6dbdebbec589222429fd8ec6e7f4e806f93d91215c8ff989c28ac0f209e71cc63a1c8b3cc3bc2f

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4616	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\53ad7b673b1d8104c14c1bdbb7703e42.lnk
1⤵
- Suspicious use of FindShellTrayWindow
PID:4616

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact