71b5dc8fec75d1efb17f4738129efd2b47fef5c3442d3993239c0ac8c29d533c

Resubmissions

05/02/2024, 11:12

240205-na8dzagdbq10

05/02/2024, 11:04

240205-m6lpeaebc93

Analysis

max time kernel
145s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
05/02/2024, 11:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Unpaid_order-.lnk
Size 1KB
Sample240205-m6lpeaebc9
SHA256 d9a8ff6e4302ed79d0e6c9bafb7e4adf7ff9b30ae6fedbffadb5061f6642658d
MD5 fa364a1cf654186f48204e6bdf456b63
SHA1 b50d418398b1b5fbb248bcd063fbad18174f8f7a
SHA512 c03bd180d034f8ccfb41114298f8b565781cdb4d009710fa60da04e5ef0bd6142998938503dc72afb7c6f87aa0809cac477c74d5d6b76e43dd9782923b2abf3b
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4512	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Unpaid_order-.lnk
1⤵
- Suspicious use of FindShellTrayWindow
PID:4512

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads