Overview
overview
3Static
static
3CFGUSBLoad...ti.rar
windows7-x64
3CFGUSBLoad...ti.rar
windows10-2004-x64
3apps/usblo...ot.dol
windows7-x64
3apps/usblo...ot.dol
windows10-2004-x64
3apps/usblo...on.png
windows7-x64
3apps/usblo...on.png
windows10-2004-x64
3apps/usblo...ta.xml
windows7-x64
1apps/usblo...ta.xml
windows10-2004-x64
1apps/usblo...ig.txt
windows7-x64
1apps/usblo...ig.txt
windows10-2004-x64
1usb-loader...or.exe
windows7-x64
1usb-loader...or.exe
windows10-2004-x64
1usb-loader...lp.chm
windows7-x64
1usb-loader...lp.chm
windows10-2004-x64
1usb-loader...ed.dll
windows7-x64
1usb-loader...ed.dll
windows10-2004-x64
1usb-loader/R3M.wdm
windows7-x64
3usb-loader/R3M.wdm
windows10-2004-x64
3usb-loader/R3X.wdm
windows7-x64
3usb-loader/R3X.wdm
windows10-2004-x64
3usb-loader...or.txt
windows7-x64
1usb-loader...or.txt
windows10-2004-x64
1usb-loader...nd.png
windows7-x64
3usb-loader...nd.png
windows10-2004-x64
3usb-loader...de.png
windows7-x64
3usb-loader...de.png
windows10-2004-x64
3usb-loader...08.gct
windows7-x64
3usb-loader...08.gct
windows10-2004-x64
3usb-loader...08.gct
windows7-x64
3usb-loader...08.gct
windows10-2004-x64
3usb-loader...8P.gct
windows7-x64
3usb-loader...8P.gct
windows10-2004-x64
3Analysis
-
max time kernel
26s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
21-05-2023 11:44
Static task
static1
Behavioral task
behavioral1
Sample
CFGUSBLoaderHBCv70MODr78Multi.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
CFGUSBLoaderHBCv70MODr78Multi.rar
Resource
win10v2004-20230221-en
Behavioral task
behavioral3
Sample
apps/usbloader/boot.dol
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
apps/usbloader/boot.dol
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
apps/usbloader/icon.png
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
apps/usbloader/icon.png
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
apps/usbloader/meta.xml
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
apps/usbloader/meta.xml
Resource
win10v2004-20230221-en
Behavioral task
behavioral9
Sample
apps/usbloader/sample_config.txt
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
apps/usbloader/sample_config.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
usb-loader/CfgLoaderConfigurator.exe
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
usb-loader/CfgLoaderConfigurator.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
usb-loader/ConfiguratorHelp.chm
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
usb-loader/ConfiguratorHelp.chm
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
usb-loader/Ionic.Zip.Reduced.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
usb-loader/Ionic.Zip.Reduced.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
usb-loader/R3M.wdm
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
usb-loader/R3M.wdm
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
usb-loader/R3X.wdm
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
usb-loader/R3X.wdm
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
usb-loader/Readme-Configurator.txt
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
usb-loader/Readme-Configurator.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
usb-loader/background.png
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
usb-loader/background.png
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
usb-loader/background_wide.png
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
usb-loader/background_wide.png
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
usb-loader/codes/RF7J08.gct
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
usb-loader/codes/RF7J08.gct
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
usb-loader/codes/RINE08.gct
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
usb-loader/codes/RINE08.gct
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
usb-loader/codes/RSVE8P.gct
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
usb-loader/codes/RSVE8P.gct
Resource
win10v2004-20230220-en
General
-
Target
apps/usbloader/sample_config.txt
-
Size
445B
-
MD5
ea9e41d768c136ae4dd00435373eaaf3
-
SHA1
1b9a48b0fffd7d1e10061f946bafe9aecb10ec34
-
SHA256
30bebf1a765d4b8ba3545e94667d8b3b36a8d1dffdc8201a31db1d9d8713c7f3
-
SHA512
dd22584878210afa7030a1fde22c8b5296dc60f60664bdcec0bb4412e84d681d26a8e4723ca43ff0a081447333aeff32805610c3d1661fc6cc8960a6baedf479
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2012 NOTEPAD.EXE