Overview
overview
7Static
static
document_Y...22.iso
windows7-x64
3document_Y...22.iso
windows10-2004-x64
3data.txt
windows7-x64
1data.txt
windows10-2004-x64
1document.vbs
windows7-x64
3document.vbs
windows10-2004-x64
7overhauled/dozens.gif
windows7-x64
1overhauled/dozens.gif
windows10-2004-x64
1overhauled...ry.dll
windows7-x64
1overhauled...ry.dll
windows10-2004-x64
1overhauled...ss.png
windows7-x64
3overhauled...ss.png
windows10-2004-x64
3Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 06:29
Static task
static1
Behavioral task
behavioral1
Sample
document_Y265_Nov#22.iso
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
document_Y265_Nov#22.iso
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
data.txt
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
data.txt
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
document.vbs
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
document.vbs
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
overhauled/dozens.gif
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
overhauled/dozens.gif
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
overhauled/honorary.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
overhauled/honorary.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
overhauled/superlativeness.png
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
overhauled/superlativeness.png
Resource
win10v2004-20221111-en
General
-
Target
data.txt
-
Size
2B
-
MD5
745e9cdc76ffef9a8c1ae15e3f2e8cf9
-
SHA1
c3b65c6048c8ddbd9422be4042b501b4049371d0
-
SHA256
10dacdccfe877dc064d57442e6fa7a4e3085dc94e11a29819c2290fc3d788724
-
SHA512
d42e7056d8aa1562a4c422b70fb871b2181945bc61829a1814a8ef36a7b776954b69d957836481fa37b75c6bf476df96306fe681973353ab3ba3e2757ede2fc2
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid process 3576 NOTEPAD.EXE