Overview

overview

8

Static

static

3

JOYSTICK/X...ME.txt

windows7-x64

1

JOYSTICK/X...ME.txt

windows10-2004-x64

1

JOYSTICK/X...PI.dll

windows7-x64

1

JOYSTICK/X...PI.dll

windows10-2004-x64

1

JOYSTICK/X...PI.dll

windows7-x64

1

JOYSTICK/X...PI.dll

windows10-2004-x64

1

JOYSTICK/X...er.exe

windows7-x64

1

JOYSTICK/X...er.exe

windows10-2004-x64

1

JOYSTICK/X...er.log

windows7-x64

1

JOYSTICK/X...er.log

windows10-2004-x64

1

JOYSTICK/X...us.cat

windows7-x64

8

JOYSTICK/X...us.cat

windows10-2004-x64

8

JOYSTICK/X...us.inf

windows7-x64

1

JOYSTICK/X...us.inf

windows10-2004-x64

1

JOYSTICK/X...us.exe

windows7-x64

JOYSTICK/X...us.exe

windows10-2004-x64

JOYSTICK/X...us.exe

windows7-x64

JOYSTICK/X...us.exe

windows10-2004-x64

JOYSTICK/X...DX.dll

windows7-x64

1

JOYSTICK/X...DX.dll

windows10-2004-x64

1

JOYSTICK/X...ut.exe

windows7-x64

1

JOYSTICK/X...ut.exe

windows10-2004-x64

1

JOYSTICK/desktop.ini

windows7-x64

1

JOYSTICK/desktop.ini

windows10-2004-x64

1

JOYSTICK/x...ce.exe

windows7-x64

7

JOYSTICK/x...ce.exe

windows10-2004-x64

1

JOYSTICK/x...64.exe

windows7-x64

7

JOYSTICK/x...64.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    23-08-2023 22:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JOYSTICK/XOutput.v0.11/ScpDriver/System/ScpVBus.inf

  • Size

    2KB

  • MD5

    ca9e7e9b233415fd02a5dc191d6b2df9

  • SHA1

    f1994319f58fa8433e57118c0bf16285d8043a52

  • SHA256

    a79a91be94913074b5a5377db6bc682ce7ae5f344fad5a0de5a6c116aa86e466

  • SHA512

    bf6ccdfb2c90b99f18f65b1dfa1856cb5543891f0382287d4e10ea128500143e5f881ff76db67fa7206ac2af11be4119375c70b4ae233de1e015a42d0734c1d3

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\JOYSTICK\XOutput.v0.11\ScpDriver\System\ScpVBus.inf
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads