fa7d530539fd9eaef8bc913e3870a20ed7a179bbc549cff54c988419b6600021

Submit
Reports

Overview

overview

Static

static

bugreport-...33.zip

windows7-x64

bugreport-...33.zip

windows10-2004-x64

FS/data/an...40-512

windows7-x64

FS/data/an...40-512

windows10-2004-x64

FS/data/an...35-562

windows7-x64

FS/data/an...35-562

windows10-2004-x64

FS/data/an...36-657

windows7-x64

FS/data/an...36-657

windows10-2004-x64

FS/data/anr/trace_00

windows7-x64

FS/data/anr/trace_00

windows10-2004-x64

FS/data/mi...03.cfa

windows7-x64

FS/data/mi...03.cfa

windows10-2004-x64

FS/data/mi...ci.log

windows7-x64

FS/data/mi...ci.log

windows10-2004-x64

FS/data/mi...g.last

windows7-x64

FS/data/mi...g.last

windows10-2004-x64

FS/data/mi...ersion

windows7-x64

FS/data/mi...ersion

windows10-2004-x64

FS/data/mi...sion.1

windows7-x64

FS/data/mi...sion.1

windows10-2004-x64

FS/data/mi...rprint

windows7-x64

FS/data/mi...rprint

windows10-2004-x64

FS/data/mi...rint.1

windows7-x64

FS/data/mi...rint.1

windows10-2004-x64

FS/data/mi...141840

windows7-x64

FS/data/mi...141840

windows10-2004-x64

FS/data/mi...061114

windows7-x64

FS/data/mi...061114

windows10-2004-x64

FS/data/mi...154534

windows7-x64

FS/data/mi...154534

windows10-2004-x64

FS/data/mi...183824

windows7-x64

FS/data/mi...183824

windows10-2004-x64

Resubmissions

14/07/2023, 06:51

230714-hmt48add21 1

14/07/2023, 06:48

230714-hkvmzadc9z 1

Analysis

max time kernel
117s
max time network
128s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
14/07/2023, 06:51

Sharing

Copy URL

Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

bugreport-ellis_t-S3RHS32.20-42-10-4-2-8-2023-07-13-23-03-33.zip

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

bugreport-ellis_t-S3RHS32.20-42-10-4-2-8-2023-07-13-23-03-33.zip

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

FS/data/anr/anr_2023-07-13-05-07-40-512

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

FS/data/anr/anr_2023-07-13-05-07-40-512

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

FS/data/anr/anr_2023-07-13-17-15-35-562

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

FS/data/anr/anr_2023-07-13-17-15-35-562

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

FS/data/anr/anr_2023-07-13-20-06-36-657

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

FS/data/anr/anr_2023-07-13-20-06-36-657

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

FS/data/anr/trace_00

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

FS/data/anr/trace_00

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

FS/data/misc/bluetooth/logs/BT_HCI_2023_0627_180203.cfa

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

FS/data/misc/bluetooth/logs/BT_HCI_2023_0627_180203.cfa

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

FS/data/misc/bluetooth/logs/btsnoop_hci.log

Resource

win7-20230712-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

FS/data/misc/bluetooth/logs/btsnoop_hci.log

Resource

win10v2004-20230703-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral15

Sample

FS/data/misc/bluetooth/logs/btsnoop_hci.log.last

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

FS/data/misc/bluetooth/logs/btsnoop_hci.log.last

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

FS/data/misc/recovery/proc/version

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

FS/data/misc/recovery/proc/version

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

FS/data/misc/recovery/proc/version.1

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

FS/data/misc/recovery/proc/version.1

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

FS/data/misc/recovery/ro.build.fingerprint

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

FS/data/misc/recovery/ro.build.fingerprint

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

FS/data/misc/recovery/ro.build.fingerprint.1

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

FS/data/misc/recovery/ro.build.fingerprint.1

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

FS/data/misc/update_engine_log/update_engine.20230712-141840

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

FS/data/misc/update_engine_log/update_engine.20230712-141840

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

FS/data/misc/update_engine_log/update_engine.20230713-061114

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

FS/data/misc/update_engine_log/update_engine.20230713-061114

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

FS/data/misc/update_engine_log/update_engine.20230713-154534

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

FS/data/misc/update_engine_log/update_engine.20230713-154534

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

FS/data/misc/update_engine_log/update_engine.20230713-183824

Resource

win7-20230712-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

FS/data/misc/update_engine_log/update_engine.20230713-183824

Resource

win10v2004-20230703-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

FS/data/misc/bluetooth/logs/btsnoop_hci.log
Size

3KB
MD5

6e854c0051128cba86fdbc56f17b9957
SHA1

8c2b96711ed9e0a5d8ee95a1df0f579a20c8c96b
SHA256

647fcb47dcfe24466c334f17e09e53dfcac5548ba7712248acb83ff5e5a94e5b
SHA512

290847b582604955cb61ec1e9f552ac2b84a8428cd9d6393e855ece42ae845483efc596e0e8256bd63ffb4f0eaa8dd78a6c7b3d0c8b67d148b62840e8f013aff

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
2136	NOTEPAD.EXE

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\FS\data\misc\bluetooth\logs\btsnoop_hci.log
1⤵
- Opens file in notepad (likely ransom note)
PID:2136

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads