Overview

overview

8

Static

static

1

Autorun.inf

windows7-x64

1

Autorun.inf

windows10-2004-x64

1

Setup.bmp

windows7-x64

3

Setup.bmp

windows10-2004-x64

7

Setup.exe

windows7-x64

8

Setup.exe

windows10-2004-x64

8

Silent_Install.bat

windows7-x64

8

Silent_Install.bat

windows10-2004-x64

8

blutooth_on.ico

windows7-x64

3

blutooth_on.ico

windows10-2004-x64

3

setup.ini

windows7-x64

1

setup.ini

windows10-2004-x64

1

x32/setup.exe

windows7-x64

8

x32/setup.exe

windows10-2004-x64

8

x64/setup.exe

windows7-x64

8

x64/setup.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    22s
  • max time network
    36s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2023 14:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    setup.ini

  • Size

    302B

  • MD5

    44528114f80723e903616cf5fae86e45

  • SHA1

    394443a8236df40a8a4a8c5f632016d15b2af7c3

  • SHA256

    be5da73f36fb66e6854700176768ad3f83063c137237782b04f2d1f6513a1994

  • SHA512

    ee36b50a5ed7847aa2fbe705bc2bb9209d40319450d9c5623167f52a8d5b49014b6dad9437bb883f3b905c3362bad759c97ab4c4ff618779d3607b3e57d141c6

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\setup.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads