Overview
overview
8Static
static
1notepad++.exe
windows7-x64
1notepad++.exe
windows10-2004-x64
1plugins/Co...st.dll
windows7-x64
1plugins/Co...st.dll
windows10-2004-x64
1plugins/Np...er.dll
windows7-x64
1plugins/Np...er.dll
windows10-2004-x64
1plugins/Np...rt.dll
windows7-x64
1plugins/Np...rt.dll
windows10-2004-x64
1plugins/mi...ls.dll
windows7-x64
1plugins/mi...ls.dll
windows10-2004-x64
1updater/GUP.exe
windows7-x64
8updater/GUP.exe
windows10-2004-x64
8updater/libcurl.dll
windows7-x64
3updater/libcurl.dll
windows10-2004-x64
3Analysis
-
max time kernel
75s -
max time network
81s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
13-07-2023 23:09
Static task
static1
Behavioral task
behavioral1
Sample
notepad++.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
notepad++.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
plugins/Config/nppPluginList.dll
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
plugins/Config/nppPluginList.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
plugins/NppConverter/NppConverter.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
plugins/NppConverter/NppConverter.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
plugins/NppExport/NppExport.dll
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
plugins/NppExport/NppExport.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
plugins/mimeTools/mimeTools.dll
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
plugins/mimeTools/mimeTools.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
updater/GUP.exe
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
updater/GUP.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
updater/libcurl.dll
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
updater/libcurl.dll
Resource
win10v2004-20230703-en
General
-
Target
notepad++.exe
-
Size
6.6MB
-
MD5
b7e5e966ebb9c302155d6b6e0da21721
-
SHA1
eca5ea2f815c856c22f8a9ba4c2c4c0713daded0
-
SHA256
31ac7d30e550eee5f28e1a04f1e7e9346ba91849b27f24c700f098654c054a8b
-
SHA512
8f3b1fcbc446ba0ad31535c9e59e9f5a542309de8779b5b9e9e9a09bf89862a32483aecc01edbc35411b5792549227a375c05abc532ae4093200876fa6aeb031
-
SSDEEP
49152:5d9VFXdEK1BPN2efc5bjaMOoDsKEj45gvV+/QFw935Gt4/fDT5dOotDVhJJao0gB:p26UcvVUDDxD2MdpU/KGHiLUiRt/moD
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4056 notepad++.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
644B
MD5f70f579156c93b097e656caba577a5c9
SHA18abfdad2ac85b7433318952b7a7e385a8c18674c
SHA256b926498a19ca95dc28964b7336e5847107dd3c0f52c85195c135d9dd6ca402d4
SHA5121e79b8e6df1ac158317d4670a01d5fb811470ace0f1f0f547ae979b3eff9bfee65770ad8134a6bddf2e871dc8fa553e146c7d7d94d2c3e139ae4b4942562b5fe