Overview
overview
10Static
static
D6.zip
windows10-1703-x64
1D6.zip
windows10-2004-x64
1SS2998.zip
windows10-1703-x64
1SS2998.zip
windows10-2004-x64
1SS2998.iso
windows10-1703-x64
3SS2998.iso
windows10-2004-x64
3SS.lnk
windows10-1703-x64
3SS.lnk
windows10-2004-x64
3pressuriza...id.txt
windows10-1703-x64
1pressuriza...id.txt
windows10-2004-x64
1pressuriza...ng.bat
windows10-1703-x64
1pressuriza...ng.bat
windows10-2004-x64
1pressuriza...er.cmd
windows10-1703-x64
1pressuriza...er.cmd
windows10-2004-x64
1pressuriza...al.dll
windows10-1703-x64
10pressuriza...al.dll
windows10-2004-x64
10pressuriza...gs.png
windows10-1703-x64
3pressuriza...gs.png
windows10-2004-x64
3Resubmissions
04/11/2022, 15:53
221104-tby5ksgeg4 1004/11/2022, 15:29
221104-swwphsgdc4 304/11/2022, 14:47
221104-r52rfsgbc2 10Analysis
-
max time kernel
94s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/11/2022, 14:47
Static task
static1
Behavioral task
behavioral1
Sample
D6.zip
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
D6.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
SS2998.zip
Resource
win10-20220901-en
Behavioral task
behavioral4
Sample
SS2998.zip
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
SS2998.iso
Resource
win10-20220812-en
Behavioral task
behavioral6
Sample
SS2998.iso
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
SS.lnk
Resource
win10-20220901-en
Behavioral task
behavioral8
Sample
SS.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
pressurization/barmaid.txt
Resource
win10-20220812-en
Behavioral task
behavioral10
Sample
pressurization/barmaid.txt
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
pressurization/dissecting.bat
Resource
win10-20220901-en
Behavioral task
behavioral12
Sample
pressurization/dissecting.bat
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
pressurization/exasperater.cmd
Resource
win10-20220812-en
Behavioral task
behavioral14
Sample
pressurization/exasperater.cmd
Resource
win10v2004-20220901-en
Behavioral task
behavioral15
Sample
pressurization/lineal.dll
Resource
win10-20220812-en
Behavioral task
behavioral16
Sample
pressurization/lineal.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
pressurization/nosebags.png
Resource
win10-20220812-en
Behavioral task
behavioral18
Sample
pressurization/nosebags.png
Resource
win10v2004-20220812-en
General
-
Target
pressurization/barmaid.txt
-
Size
55KB
-
MD5
78307784d064fc1cf77dda8620116115
-
SHA1
d9a2c5412859a77874edbdbfda5837c68edaf1fa
-
SHA256
411edda10cb7f779895889c506d6e39f988b7102372b620b7f4aa66aec9a0e44
-
SHA512
3039fb2524dcae2ad4f35f73956db51163dde1574bc393ee6013f0931d74a0413ef9a8333b484f2ed23c7360ee7c74b18b9ad02b038010b905c9c86a9d6c67f3
-
SSDEEP
768:dlbURjBM+ohKxviKxIbDKxviOcbURjBM+ohKLiUBInTtwjUAhZohZLNSh5QfInTH:LaB/fxvYWxvrcaB/fLNU8ZsGuZw
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3996 NOTEPAD.EXE