4a15862e3e915052a502f2c37459aa5a581855fbf4e35346403992a36ded6a53

Analysis

max time kernel
137s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
29/08/2024, 17:45

Target

WinX/Group3/06 - SystemAbout.lnk
Size

1KB
MD5

bcfdf86ed5e3752aef4afbcbf67b269c
SHA1

6a5398577f6058ba2b57a17006a5843f290e8186
SHA256

af1632380630da749eee8aec4605e4d01bc9fd1b00e26f549b09b980e19a10e7
SHA512

abc6ea6b6f98212eabb306f55a9379912a8e3f204ad0bac2c936b25079a788b5441e71194e7dde1283461cae4303aeeb5d7ba56d9a0a935ceda304d9fc0dd455

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000_Classes\Local Settings	cmd.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\WinX\Group3\06 - SystemAbout.lnk"
1⤵
- Modifies registry class
PID:4672

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact