Analysis
- max time kernel
120s - max time network
120s - platform
windows7_x64 - resource
win7-en-20211208 - submitted
16/12/2021, 09:49
General
- Target W3Mfc.DLL
- Size 244KB
- Sample211216-ltb4rscecl
- SHA256 eb88869b7f1bc3f33bb3cd56d6cf4d81fbb0beb590cb9678cc1acf3206f3056f
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\W3Mfc.DLL1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1752-54-0x000007FEFC261000-0x000007FEFC263000-memory.dmp
memory/1752-55-0x0000000002270000-0x0000000002271000-memory.dmp