Analysis
- max time kernel
117s - max time network
126s - platform
windows10_x64 - resource
win10-en-20211208 - submitted
16/12/2021, 09:49
General
- Target W3Mfc.DLL
- Size 244KB
- Sample211216-ltb4rscecl
- SHA256 eb88869b7f1bc3f33bb3cd56d6cf4d81fbb0beb590cb9678cc1acf3206f3056f
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\W3Mfc.DLL1⤵