813a76da99ec24da6c6121e4777b973fe9545ad4c1fb26ce7040dee21686e060

Resubmissions

06-08-2022 13:39

220806-qx5mpshfd5 10

06-08-2022 13:30

220806-qr2nvsfbcr 1

Analysis

max time kernel
415s
max time network
453s
platform
windows10-2004_x64
resource
win10v2004-20220721-en
resource tags

arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
submitted
06-08-2022 13:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Flashpoint 10.1 Infinity.exe
Size

712.3MB
MD5

e6cef8f065a984eb91134bdd6b1113f4
SHA1

8040355b6f3d935d9bde2dad7dd1bc0c7834c314
SHA256

813a76da99ec24da6c6121e4777b973fe9545ad4c1fb26ce7040dee21686e060
SHA512

ec99954157b0354b5ceb92e6698cc5a0656e016d79e1cc20b3574496ee8a21b4fbc57ae6c0b7fdab64b3cfd81b6137c952f1a2f679517247e8f49f72afb87119

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

Flashpoint 10.1 Infinity.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	Flashpoint 10.1 Infinity.exe
Key created	\REGISTRY\USER\S-1-5-21-2372564722-193526734-2636556182-1000_Classes\WOW6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	Flashpoint 10.1 Infinity.exe

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

Flashpoint 10.1 Infinity.exe

pid process

1704 Flashpoint 10.1 Infinity.exe

pid	process
1704	Flashpoint 10.1 Infinity.exe

C:\Users\Admin\AppData\Local\Temp\Flashpoint 10.1 Infinity.exe
"C:\Users\Admin\AppData\Local\Temp\Flashpoint 10.1 Infinity.exe"
1⤵
- Modifies registry class
- Suspicious use of FindShellTrayWindow
PID:1704

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v6

Replay Monitor

Loading Replay Monitor...

Downloads