General

  • Target

    https://j.mp/3bZ6ZG7

  • Sample

    210122-ll8z5fc276

Score
10/10

Malware Config

Targets

    • Target

      https://j.mp/3bZ6ZG7

    Score
    10/10
    • Suspicious use of NtCreateProcessExOtherParentProcess

    • Program crash

    • Enumerates physical storage devices

      Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

System Information Discovery

1
T1082

Tasks