Overview

overview

3

Static

static

1

scape 2.zip

windows7-x64

1

scape 2.zip

windows10-2004-x64

1

manifest.json

windows7-x64

3

manifest.json

windows10-2004-x64

3

modlist.html

windows7-x64

1

modlist.html

windows10-2004-x64

1

overrides/...ts.cfg

windows7-x64

3

overrides/...ts.cfg

windows10-2004-x64

3

overrides/...ls.cfg

windows7-x64

3

overrides/...ls.cfg

windows10-2004-x64

3

overrides/...ck.zip

windows7-x64

1

overrides/...ck.zip

windows10-2004-x64

1

overrides/...me.txt

windows7-x64

1

overrides/...me.txt

windows10-2004-x64

1

overrides/...s.json

windows7-x64

3

overrides/...s.json

windows10-2004-x64

3

overrides/...es.cfg

windows7-x64

3

overrides/...es.cfg

windows10-2004-x64

3

overrides/...s.json

windows7-x64

3

overrides/...s.json

windows10-2004-x64

3

overrides/...on.cfg

windows7-x64

3

overrides/...on.cfg

windows10-2004-x64

3

overrides/...al.cfg

windows7-x64

3

overrides/...al.cfg

windows10-2004-x64

3

overrides/...es.cfg

windows7-x64

3

overrides/...es.cfg

windows10-2004-x64

3

overrides/...es.cfg

windows7-x64

3

overrides/...es.cfg

windows10-2004-x64

3

overrides/...in.cfg

windows7-x64

3

overrides/...in.cfg

windows10-2004-x64

3

overrides/...es.cfg

windows7-x64

3

overrides/...es.cfg

windows10-2004-x64

3

Analysis

  • max time kernel
    31s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    29-05-2023 13:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    overrides/config/ChanceCubes/CustomRewards/Resourcepack/readme.txt

  • Size

    113B

  • MD5

    7079a2f00600a3f03f02968660766bef

  • SHA1

    e453c938b6171ac1cb42a43ce162f6b2c1d74947

  • SHA256

    b731a2d90d4739e31e450520714847657e1c5b3dc0f4e98c399daebc99b0c29a

  • SHA512

    c6268a3ee0d0777fe04f6f8f79ea34ad8785b778d44ff3bc92d21d90d0def4e9c44fce8f990a13ded86510e931968d20f09baa2838c7096e3d8bf78acee914c1

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\overrides\config\ChanceCubes\CustomRewards\Resourcepack\readme.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads