dbda6c3fb1a2fcf56a7143ee81c723ed23392a34aea6a94eaea3620004093cf0

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
05/04/2024, 15:24

Target

N0T_A_V1RUS.EXE.lnk
Size

1KB
MD5

94794427fef5f13d67d49e1b7a3173cb
SHA1

34fd994cd0c3478b0537b03dab17d2cdbd16a320
SHA256

dbda6c3fb1a2fcf56a7143ee81c723ed23392a34aea6a94eaea3620004093cf0
SHA512

9e3fb3040522661497521645a63591099004c99417d6828c2d746ee342d290f5136b772d4f62443c51e0c345ceb89e3f4c76aba641f9056c30f3dc71753cc8f5

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\N0T_A_V1RUS.EXE.lnk
1⤵
- Modifies registry class
PID:3044

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact