Overview

overview

5

Static

static

3

Bord_2_Old_185.zip

windows7-x64

1

Bord_2_Old_185.zip

windows10-2004-x64

5

Engine/Con...ne.ini

windows7-x64

1

Engine/Con...ne.ini

windows10-2004-x64

1

Engine/Con...ut.ini

windows7-x64

1

Engine/Con...ut.ini

windows10-2004-x64

1

Engine/Loc...Ed.int

windows7-x64

3

Engine/Loc...Ed.int

windows10-2004-x64

3

Engine/Sha...er.usf

windows7-x64

3

Engine/Sha...er.usf

windows10-2004-x64

3

Engine/Sha...er.bin

windows7-x64

3

Engine/Sha...er.bin

windows10-2004-x64

3

Engine/Sha...er.bin

windows7-x64

3

Engine/Sha...er.bin

windows10-2004-x64

3

Engine/Sha...AA.bin

windows7-x64

3

Engine/Sha...AA.bin

windows10-2004-x64

3

Engine/Sha...er.bin

windows7-x64

3

Engine/Sha...er.bin

windows10-2004-x64

3

Engine/Sha...on.bin

windows7-x64

3

Engine/Sha...on.bin

windows10-2004-x64

3

Engine/Sha...er.bin

windows7-x64

3

Engine/Sha...er.bin

windows10-2004-x64

3

Engine/Sha...AO.bin

windows7-x64

3

Engine/Sha...AO.bin

windows10-2004-x64

3

Engine/Sha...er.usf

windows7-x64

3

Engine/Sha...er.usf

windows10-2004-x64

3

Engine/Sha...AA.usf

windows7-x64

3

Engine/Sha...AA.usf

windows10-2004-x64

3

Engine/Sha...er.usf

windows7-x64

3

Engine/Sha...er.usf

windows10-2004-x64

3

Engine/Sha...on.usf

windows7-x64

3

Engine/Sha...on.usf

windows10-2004-x64

3

Analysis

  • max time kernel
    19s
  • max time network
    36s
  • platform
    windows7_x64
  • resource
    win7-20230703-en
  • resource tags

    arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2023, 02:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Engine/Config/BaseInput.ini

  • Size

    26KB

  • MD5

    b727e85e93ceab4c856c4c9440c27845

  • SHA1

    cbe943ca2979d7ab00548657f57962d8c1a17c4d

  • SHA256

    e2cefa77557909a9fdb5ea8dc9defb3c883eea8365edb85474bca9cf7671b025

  • SHA512

    d5543b017cf33acd5e0d19334f69b35c010b86b75e57802689eee89dd5413e642601dc2743d671c8b90fac5bc19904384a5fde5202b26d29bca17f6cf7aac7fe

  • SSDEEP

    384:1hE/ZvYgEXww9h6bJf7Hn04z7UhJ5Wse49wei/hszgXt:wuvww2bJfDn0s7EyDJsEXt

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Engine\Config\BaseInput.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads