Overview

overview

10

Static

static

10

Universocr...l1.txt

windows7-x64

1

Universocr...l1.txt

windows10-2004-x64

5

Resubmissions

29/07/2024, 17:10

240729-vpz5gazeqp1

29/07/2024, 17:09

240729-vpcdeathqh1

14/06/2024, 04:49

240614-ff6tbszbpj1

29/03/2024, 06:22

240329-g4ycjabe4t1

29/03/2024, 06:17

240329-g16vhabd8v1

05/02/2024, 17:04

240205-vlb88seefk1

25/01/2024, 15:42

240125-s5e35ahhf63

25/01/2024, 15:41

240125-s4smtsaghm10

23/12/2023, 03:09

231223-dnx52sgfa610

22/12/2023, 01:18

231222-bn5h1sbfel10

Analysis

  • max time kernel
    531s
  • max time network
    599s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/08/2023, 16:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Universocraft_by__JuPo_2022.yml1.txt
  • Size 41.8MB
  • Sample230810-tms3pseh23
  • SHA256 5bceebc1d2b6899ca9b532e00eda646aec85221ac82d77392476f4cfc1d714cd
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Drops file in System32 directory 3 IoCs
  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Universocraft_by__JuPo_2022.yml1.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:228
  • C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe -k netsvcs -p
    1⤵
    • Drops file in System32 directory
    PID:2740

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        wsu438F.tmp
        • Path C:\Users\Admin\AppData\Local\Temp\wsu438F.tmp
        • Size 14KB
        • SHA256 32297224427103aa1834dba276bf5d49cd5dd6bda0291422e47ad0d0706c6d40
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        9NCBCSZSJRSB.dat
        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
        • Size 29KB
        • SHA256 e84c0b6dc3c0662b275034f1e0a1290eac191e298a21ea3a090e3922c0eb728d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        9NCBCSZSJRSB.dat
        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
        • Size 29KB
        • SHA256 2339b9bb6d96ba6afaf238651585b1a4aed324dc9924d6428b75fe4ceb572bd5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        9NCBCSZSJRSB.dat
        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
        • Size 29KB
        • SHA256 0941e166f16482d4ce8ea1407f9f1a8b8afbd3579b105336e4eb5082e95d337e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        9NCBCSZSJRSB.dat
        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
        • Size 29KB
        • SHA256 c861d9ee1dc090bbf2f73ac52d73124581781c4c3ccc673f9dab2df625dec10f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        9NCBCSZSJRSB.dat
        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
        • Size 29KB
        • SHA256 48d2eb309b211cbfbe6f4824bfa72831b31c103758613e5893fb48f2342b5515
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        9NCBCSZSJRSB.dat
        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
        • Size 29KB
        • SHA256 0e20e080bd68d3b8fd6ade934310aa0410015a0c988efd93229c0bc045b6f649
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        9NCBCSZSJRSB.dat
        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
        • Size 29KB
        • SHA256 0eac1f5db2723925a1bcfece3e10b833714463295588d717574a8e68a5ac2e2b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        9NCBCSZSJRSB.dat
        • Path C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
        • Size 29KB
        • SHA256 01f0b46abde4636781b0b4ed491d677ba2fba38510169cb6586a4b5a7dc33501
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download