4a15862e3e915052a502f2c37459aa5a581855fbf4e35346403992a36ded6a53 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
29-08-2024 17:45

Sharing

Report Analysis Logs

General

Target

WinX/Group3/06 - SystemAbout.lnk
Size

1KB
MD5

bcfdf86ed5e3752aef4afbcbf67b269c
SHA1

6a5398577f6058ba2b57a17006a5843f290e8186
SHA256

af1632380630da749eee8aec4605e4d01bc9fd1b00e26f549b09b980e19a10e7
SHA512

abc6ea6b6f98212eabb306f55a9379912a8e3f204ad0bac2c936b25079a788b5441e71194e7dde1283461cae4303aeeb5d7ba56d9a0a935ceda304d9fc0dd455

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\WinX\Group3\06 - SystemAbout.lnk"
1⤵
PID:2088

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2088-26-0x0000000002760000-0x0000000002761000-memory.dmp

Filesize
4KB

Download