Overview
overview
10Static
static
10Windows/Boot/$I30
windows7-x64
1Windows/Boot/$I30
windows10-2004-x64
1Windows/Bo...es.ini
windows7-x64
1Windows/Bo...es.ini
windows10-2004-x64
1Windows/Bo...FI/BCD
windows7-x64
1Windows/Bo...FI/BCD
windows10-2004-x64
1Windows/Bo...ot.sdi
windows7-x64
3Windows/Bo...ot.sdi
windows10-2004-x64
3Windows/Bo...ys.bin
windows7-x64
3Windows/Bo...ys.bin
windows10-2004-x64
3Windows/Bo...pt.bin
windows7-x64
3Windows/Bo...pt.bin
windows10-2004-x64
3Windows/Bo...AT/BCD
windows7-x64
1Windows/Bo...AT/BCD
windows10-2004-x64
1Windows/Bo...ot.sdi
windows7-x64
3Windows/Bo...ot.sdi
windows10-2004-x64
3Windows/Bo...ix.bin
windows7-x64
3Windows/Bo...ix.bin
windows10-2004-x64
3Windows/Boot/EFI/$I30
windows7-x64
1Windows/Boot/EFI/$I30
windows10-2004-x64
1Windows/Im...25.png
windows7-x64
3Windows/Im...25.png
windows10-2004-x64
3Windows/Im...50.png
windows7-x64
3Windows/Im...50.png
windows10-2004-x64
3Windows/Im...00.png
windows7-x64
3Windows/Im...00.png
windows10-2004-x64
3Windows/Im...00.png
windows7-x64
3Windows/Im...00.png
windows10-2004-x64
3Windows/Im...te.png
windows7-x64
3Windows/Im...te.png
windows10-2004-x64
3Windows/Im...00.png
windows7-x64
3Windows/Im...00.png
windows10-2004-x64
3Analysis
-
max time kernel
1s -
max time network
37s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
31-05-2023 18:19
Behavioral task
behavioral1
Sample
Windows/Boot/$I30
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral2
Sample
Windows/Boot/$I30
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Windows/Boot/BootDebuggerFiles.ini
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral4
Sample
Windows/Boot/BootDebuggerFiles.ini
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
Windows/Boot/DVD/EFI/BCD
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral6
Sample
Windows/Boot/DVD/EFI/BCD
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
Windows/Boot/DVD/EFI/boot.sdi
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral8
Sample
Windows/Boot/DVD/EFI/boot.sdi
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
Windows/Boot/DVD/EFI/en-US/efisys.bin
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral10
Sample
Windows/Boot/DVD/EFI/en-US/efisys.bin
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
Windows/Boot/DVD/EFI/en-US/efisys_noprompt.bin
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral12
Sample
Windows/Boot/DVD/EFI/en-US/efisys_noprompt.bin
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
Windows/Boot/DVD/PCAT/BCD
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral14
Sample
Windows/Boot/DVD/PCAT/BCD
Resource
win10v2004-20230221-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
Windows/Boot/DVD/PCAT/boot.sdi
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral16
Sample
Windows/Boot/DVD/PCAT/boot.sdi
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
Windows/Boot/DVD/PCAT/es-ES/bootfix.bin
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral18
Sample
Windows/Boot/DVD/PCAT/es-ES/bootfix.bin
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
Windows/Boot/EFI/$I30
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral20
Sample
Windows/Boot/EFI/$I30
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-black_scale-125.png
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral22
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-black_scale-125.png
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-black_scale-150.png
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral24
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-black_scale-150.png
Resource
win10v2004-20230221-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-black_scale-200.png
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral26
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-black_scale-200.png
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-black_scale-400.png
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral28
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-black_scale-400.png
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-white.png
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral30
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-white.png
Resource
win10v2004-20230220-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-white_scale-100.png
Resource
win7-20230220-en
windows7-x64
Behavioral task
behavioral32
Sample
Windows/ImmersiveControlPanel/images/logo.contrast-white_scale-100.png
Resource
win10v2004-20230220-en
windows10-2004-x64
General
-
Target
Windows/Boot/BootDebuggerFiles.ini
-
Size
91B
-
MD5
884885cd0abca482c4d65431b460cce8
-
SHA1
ce2e7e11ba4f91497078f46b5dea00aabd310d49
-
SHA256
a2b580321650a9e249e253eff90096981876323fbbccd0436af173ad6759b3a1
-
SHA512
2404a88cfeb38fdc9910f362a8afb4e7f1bedc7eda8957d985cf5e4aa6e46527a4a01a7cb143b332a1e61c4c41a471d0721622e7f66985eb935a13220553d4f7
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid process 1064 NOTEPAD.EXE