Resubmissions

06-08-2022 13:39

220806-qx5mpshfd5 10

06-08-2022 13:30

220806-qr2nvsfbcr 1

Analysis

  • max time kernel
    391s
  • max time network
    489s
  • platform
    windows10-1703_x64
  • resource
    win10-20220718-en
  • resource tags

    arch:x64arch:x86image:win10-20220718-enlocale:en-usos:windows10-1703-x64system
  • submitted
    06-08-2022 13:39

General

  • Target

    Flashpoint 10.1 Infinity.exe

  • Size

    712.3MB

  • MD5

    e6cef8f065a984eb91134bdd6b1113f4

  • SHA1

    8040355b6f3d935d9bde2dad7dd1bc0c7834c314

  • SHA256

    813a76da99ec24da6c6121e4777b973fe9545ad4c1fb26ce7040dee21686e060

  • SHA512

    ec99954157b0354b5ceb92e6698cc5a0656e016d79e1cc20b3574496ee8a21b4fbc57ae6c0b7fdab64b3cfd81b6137c952f1a2f679517247e8f49f72afb87119

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Modifies registry class 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Flashpoint 10.1 Infinity.exe
    "C:\Users\Admin\AppData\Local\Temp\Flashpoint 10.1 Infinity.exe"
    1⤵
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    PID:3492

Network

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3492-117-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-118-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-119-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-120-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-121-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-122-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-123-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-124-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-125-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-126-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-127-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-128-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-129-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-130-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-131-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-132-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-133-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-134-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-135-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-136-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-137-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-138-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-139-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-140-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-141-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-142-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-143-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-144-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-145-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-146-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-147-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-148-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-149-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-150-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-151-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-152-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-153-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-154-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-155-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-156-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-157-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-159-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-160-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-158-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-161-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-162-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-163-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-164-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-165-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-166-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-167-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-168-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-170-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-169-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-171-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-172-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-173-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-174-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-175-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-176-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-177-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB

  • memory/3492-178-0x0000000077E60000-0x0000000077FEE000-memory.dmp
    Filesize

    1.6MB