Resubmissions
20-02-2023 05:44
230220-gflzlahc6w 10Analysis
-
max time kernel
59s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20-02-2023 05:44
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
langs/English.ini
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
langs/English.ini
Resource
win10v2004-20220812-en
General
-
Target
langs/English.ini
-
Size
107KB
-
MD5
525ce1c02ca53f9c63cb697ed3aae899
-
SHA1
9ddc2763d9dd663f3cb0febf0d580e21c52c2f18
-
SHA256
0f9d467f6bb6f682c0d1351b26038950c73720f2bfc0741ec1c7bfab2046d75f
-
SHA512
734d599d839b1266c42f340e044243ae30d1859d314eed7738f72f59201d19359f1ac6ee0cac8bfef4a0a2b8f2232a4f1f33336770c8c43f929c1bef162d2317
-
SSDEEP
1536:5S5Ybl8/lKlXiF3y24FMuRvV5I7BohUT1:xxXiVQV5uJ1
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid process 4668 NOTEPAD.EXE