Overview
overview
6Static
static
3AofW4.FixOnly.rar
windows7-x64
3AofW4.FixOnly.rar
windows10-2004-x64
3AofW4.FixO...IS.url
windows7-x64
1AofW4.FixO...IS.url
windows10-2004-x64
1AofW4.FixO...ix.ini
windows7-x64
1AofW4.FixO...ix.ini
windows10-2004-x64
1AofW4.FixO...ix.url
windows7-x64
6AofW4.FixO...ix.url
windows10-2004-x64
6AofW4.FixO...64.dll
windows7-x64
1AofW4.FixO...64.dll
windows10-2004-x64
1AofW4.FixO...64.dll
windows7-x64
1AofW4.FixO...64.dll
windows10-2004-x64
1AofW4.FixO...s.json
windows7-x64
3AofW4.FixO...s.json
windows10-2004-x64
3AofW4.FixO...64.dll
windows7-x64
1AofW4.FixO...64.dll
windows10-2004-x64
1AofW4.FixO...64.dll
windows7-x64
1AofW4.FixO...64.dll
windows10-2004-x64
1Analysis
-
max time kernel
146s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
05/05/2023, 21:57
Static task
static1
Behavioral task
behavioral1
Sample
AofW4.FixOnly.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
AofW4.FixOnly.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
AofW4.FixOnly/DESCARGA JUEGOS GRATIS.url
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
AofW4.FixOnly/DESCARGA JUEGOS GRATIS.url
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
AofW4.FixOnly/OnlineFix.ini
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
AofW4.FixOnly/OnlineFix.ini
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
AofW4.FixOnly/OnlineFix.url
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
AofW4.FixOnly/OnlineFix.url
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
AofW4.FixOnly/OnlineFix64.dll
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
AofW4.FixOnly/OnlineFix64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
AofW4.FixOnly/StubDRM64.dll
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
AofW4.FixOnly/StubDRM64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
AofW4.FixOnly/launcher-settings.json
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
AofW4.FixOnly/launcher-settings.json
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
AofW4.FixOnly/steam_api64.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
AofW4.FixOnly/steam_api64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
AofW4.FixOnly/steam_api64.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
AofW4.FixOnly/steam_api64.dll
Resource
win10v2004-20230220-en
General
-
Target
AofW4.FixOnly/OnlineFix.ini
-
Size
1003B
-
MD5
027111a8ece4beac60157c595e43ccbe
-
SHA1
d1b19a1ceac116e3cf8ebfbb925280ad9b9ae155
-
SHA256
729d8d2cda4833e84ac0b3d4144a4b0b114845ba976d30a93035099a15fbe32d
-
SHA512
5abe4170b936a0e74647cf1515be3f83aa7040139fed85f10ce6f220922da0713f8cb85ef6e4c6e27516893ab8bdd4f92c1374c1599da1b85bd712f850814a6b
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1536 NOTEPAD.EXE