Overview
overview
7Static
static
7com.joojvp...om.zip
windows7-x64
1com.joojvp...om.zip
windows10-2004-x64
1com.joojvp...ll.txt
windows7-x64
1com.joojvp...ll.txt
windows10-2004-x64
1com.joojvp..._1.png
windows7-x64
3com.joojvp..._1.png
windows10-2004-x64
3com.joojvp...om.apk
android-9-x86
com.joojvp...om.apk
android-10-x64
com.joojvp...om.apk
android-11-x64
baseline.prof
windows7-x64
3baseline.prof
windows10-2004-x64
3baseline.profm
windows7-x64
3baseline.profm
windows10-2004-x64
3geoip.dat
windows7-x64
3geoip.dat
windows10-2004-x64
3geosite.dat
windows7-x64
3geosite.dat
windows10-2004-x64
3com.joojvp...-1.apk
android-9-x86
com.joojvp...-1.apk
android-9-x86
com.joojvp...-1.apk
android-10-x64
com.joojvp...-1.apk
android-11-x64
com.joojvp...-1.apk
android-9-x86
com.joojvp...-1.apk
android-10-x64
com.joojvp...-1.apk
android-11-x64
com.joojvp...-1.apk
android-9-x86
com.joojvp...-1.apk
android-10-x64
com.joojvp...-1.apk
android-11-x64
Resubmissions
07/08/2023, 05:07
230807-fr9dladf66 707/08/2023, 05:04
230807-fqc9rseh9v 707/08/2023, 05:01
230807-fnthzadf57 7Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
07/08/2023, 05:04
Static task
static1
Behavioral task
behavioral1
Sample
com.joojvpn.uj.io_103-p_aab_apksos.com.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
com.joojvpn.uj.io_103-p_aab_apksos.com.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
com.joojvpn.uj.io/How-to-install.txt
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
com.joojvpn.uj.io/How-to-install.txt
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
com.joojvpn.uj.io/appicon_1.png
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
com.joojvpn.uj.io/appicon_1.png
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
com.joojvpn.uj.io/com.joojvpn.uj.io-1-apksos.com.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral8
Sample
com.joojvpn.uj.io/com.joojvpn.uj.io-1-apksos.com.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral9
Sample
com.joojvpn.uj.io/com.joojvpn.uj.io-1-apksos.com.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral10
Sample
baseline.prof
Resource
win7-20230712-en
Behavioral task
behavioral11
Sample
baseline.prof
Resource
win10v2004-20230703-en
Behavioral task
behavioral12
Sample
baseline.profm
Resource
win7-20230712-en
Behavioral task
behavioral13
Sample
baseline.profm
Resource
win10v2004-20230703-en
Behavioral task
behavioral14
Sample
geoip.dat
Resource
win7-20230712-en
Behavioral task
behavioral15
Sample
geoip.dat
Resource
win10v2004-20230703-en
Behavioral task
behavioral16
Sample
geosite.dat
Resource
win7-20230712-en
Behavioral task
behavioral17
Sample
geosite.dat
Resource
win10v2004-20230703-en
Behavioral task
behavioral18
Sample
com.joojvpn.uj.io/config.armeabi_v7a-1.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral19
Sample
com.joojvpn.uj.io/config.en-1.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral20
Sample
com.joojvpn.uj.io/config.en-1.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral21
Sample
com.joojvpn.uj.io/config.en-1.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral22
Sample
com.joojvpn.uj.io/config.es-1.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral23
Sample
com.joojvpn.uj.io/config.es-1.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral24
Sample
com.joojvpn.uj.io/config.es-1.apk
Resource
android-x64-arm64-20230621-en
Behavioral task
behavioral25
Sample
com.joojvpn.uj.io/config.xxhdpi-1.apk
Resource
android-x86-arm-20230621-en
Behavioral task
behavioral26
Sample
com.joojvpn.uj.io/config.xxhdpi-1.apk
Resource
android-x64-20230621-en
Behavioral task
behavioral27
Sample
com.joojvpn.uj.io/config.xxhdpi-1.apk
Resource
android-x64-arm64-20230621-en
General
-
Target
com.joojvpn.uj.io/How-to-install.txt
-
Size
492B
-
MD5
ecb350cce8b57cd45a7c68c48265cb55
-
SHA1
73b4d9d82b3758ef5c509949886947dbb3cc078d
-
SHA256
f10c1489f39c44bb9403fd03151088973dcb9c1326c5c13368f114460dad7fcd
-
SHA512
69c64acd5a352da474d156bf2ba007b255c8b58c8cf4b2fd074d157a336bd6efb8dca6eeecd462ca8c49d3574ef7ebcd0cd1553a3b0da44061b0dff3fbaa4131
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1336 NOTEPAD.EXE