Analysis
-
max time kernel
131s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
01-06-2022 15:58
General
-
Target
34frgegrg.exe
-
Size
307KB
-
MD5
a9a6d0f6e1266dafd869ce61daedf2a6
-
SHA1
caf22ef1d06ca587e3705bbebb4305accb51c100
-
SHA256
d511ea53f500da9e831ba3393914619555dbe05d2c5719a2f4c23742ca74c816
-
SHA512
85a6f8ac6ab8b832d5bb8e4804b749bd5e78736f9cdee9916085474b73107a2a015fd6aff72b2b551a120bb9a32038ecde8008007307637c0d5d003d53d2a104
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\34frgegrg.exe"C:\Users\Admin\AppData\Local\Temp\34frgegrg.exe"1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4048-130-0x000000004E020000-0x000000004E060000-memory.dmpFilesize
256KB
-
memory/4048-131-0x0000000000400000-0x0000000000452000-memory.dmpFilesize
328KB
-
memory/4048-133-0x000000004E020000-0x000000004E060000-memory.dmpFilesize
256KB