Overview

overview

8

Static

static

3

JOYSTICK/X...ME.txt

windows7-x64

1

JOYSTICK/X...ME.txt

windows10-2004-x64

1

JOYSTICK/X...PI.dll

windows7-x64

1

JOYSTICK/X...PI.dll

windows10-2004-x64

1

JOYSTICK/X...PI.dll

windows7-x64

1

JOYSTICK/X...PI.dll

windows10-2004-x64

1

JOYSTICK/X...er.exe

windows7-x64

1

JOYSTICK/X...er.exe

windows10-2004-x64

1

JOYSTICK/X...er.log

windows7-x64

1

JOYSTICK/X...er.log

windows10-2004-x64

1

JOYSTICK/X...us.cat

windows7-x64

8

JOYSTICK/X...us.cat

windows10-2004-x64

8

JOYSTICK/X...us.inf

windows7-x64

1

JOYSTICK/X...us.inf

windows10-2004-x64

1

JOYSTICK/X...us.exe

windows7-x64

JOYSTICK/X...us.exe

windows10-2004-x64

JOYSTICK/X...us.exe

windows7-x64

JOYSTICK/X...us.exe

windows10-2004-x64

JOYSTICK/X...DX.dll

windows7-x64

1

JOYSTICK/X...DX.dll

windows10-2004-x64

1

JOYSTICK/X...ut.exe

windows7-x64

1

JOYSTICK/X...ut.exe

windows10-2004-x64

1

JOYSTICK/desktop.ini

windows7-x64

1

JOYSTICK/desktop.ini

windows10-2004-x64

1

JOYSTICK/x...ce.exe

windows7-x64

7

JOYSTICK/x...ce.exe

windows10-2004-x64

1

JOYSTICK/x...64.exe

windows7-x64

7

JOYSTICK/x...64.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-08-2023 22:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JOYSTICK/XOutput.v0.11/ScpDriver/ScpDriver.log

  • Size

    1KB

  • MD5

    29257a3a755046f262673387cabb0ded

  • SHA1

    004a4bb02145ccaa14de5f51e892c66343fc9f77

  • SHA256

    7a608c97ad8cdd61cc2b4b8f948f7f4d8926a51a151e19142d1fe35c01894169

  • SHA512

    330f04973cee3ce475b11eaf09282237c07c642b5ea2339bc5c4be062e8b22586d4170802a7db4f87522efff94d3076931153dc495a6f522b04a26ad989ab1a0

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\JOYSTICK\XOutput.v0.11\ScpDriver\ScpDriver.log
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:5056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads