04100bd2deb71e7cffc27d9a48090703ca340d65ac420c94caf01fb0488c8aa1 | Triage

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06/03/2024, 23:00

Sharing

Report Analysis Logs

General

Target

808-74-0x0000000000BD0000-0x0000000000C10000-memory.lnk
Size

256KB
MD5

27c88d672d2881ddd029f9fe2125c20a
SHA1

6bad5a70cfe31ccdbed534812f698a8f36fdd726
SHA256

04100bd2deb71e7cffc27d9a48090703ca340d65ac420c94caf01fb0488c8aa1
SHA512

76eb1d0b5928789a88bd01c97e18c7d3e38d4fd9322f2a87baa687631e6ef3a1c6452cd50d0f215822a34756956f1217214a77e254298636e3b992a7220b2ff5
SSDEEP

768:dx50xhA/vMHTi9bDlix50xhA/vMHTi9bDlix50xhA/vMHTi9bDx:dx5PnYi9bsx5PnYi9bsx5PnYi9bN

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\808-74-0x0000000000BD0000-0x0000000000C10000-memory.lnk
1⤵
PID:1924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads