SUSPICIOUS — photov_995715268199.lnk
Verdict: suspicious (54/100) · Family: unknown
File type: lnk · SHA-256: e0638a69be7900bbbe6d14296a85d9d818d5b85f37e80b3653cbb4431b9db158
MITRE ATT&CK
- T1543.003
- T1112
YARA
Dynamic analysis (windows)
18668 behavior events · 2 ATT&CK techniques · 13 dropped files.
Runtime network
- searchapp.bundleassets.example
- www.msftconnecttest.com
- ycjlvalve.com
- desktop-hsgcbep
- config.edge.skype.com
- dns.msftncsi.com
- www.bing.com
- edge.microsoft.com
- aps.prod.windows.com
- watson.events.data.microsoft.com
- ecs.office.com
- g.live.com
- fs.microsoft.com
- self.events.data.microsoft.com
- www.msftncsi.com
- 192.168.122.106
- 192.168.122.1
- 192.168.122.255
- 224.0.0.252
- 192.168.122.105
Analyzed on MalwareAnalyzer by Cyble · Open interactive report