Analysis
-
max time kernel
176s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
11-02-2023 16:30
Static task
static1
Behavioral task
behavioral1
Sample
MODSKIN_13.3.zip
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MODSKIN_13.3.zip
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
LOLPRO 13.3.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
LOLPRO 13.3.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
README.txt
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
README.txt
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
data.zip
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
data.zip
Resource
win10v2004-20221111-en
General
-
Target
README.txt
-
Size
116B
-
MD5
efee2b47ffee11184be82fbaf1ee4af2
-
SHA1
76d0acbee33912f01b4dd8056485cfb49cac1574
-
SHA256
7814765b6234fdc9bb8c56dc24dcac13ecaf004dd67db4166a07b1f73052477c
-
SHA512
69977e738a90e15803115d30373507e8995f8bf4a92c6ed3262493e4cee147cfe3b183e081ad0d1d3d5ae7b433c8ccf2d931181a51762a02aa9dd54b55be7c06
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4928 NOTEPAD.EXE