Overview
overview
3Static
static
3SCriptHook...73.zip
windows7-x64
1SCriptHook...73.zip
windows10-2004-x64
1SMPCScript...er.exe
windows7-x64
1SMPCScript...er.exe
windows10-2004-x64
1ScriptHookSMPC.dll
windows7-x64
3ScriptHookSMPC.dll
windows10-2004-x64
3ScriptHookSMPC.ini
windows7-x64
1ScriptHookSMPC.ini
windows10-2004-x64
1ScriptHookSMPC.log
windows7-x64
1ScriptHookSMPC.log
windows10-2004-x64
1ScriptHookSMPC.ttf
windows7-x64
3ScriptHookSMPC.ttf
windows10-2004-x64
3Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
29/08/2023, 13:03
Static task
static1
Behavioral task
behavioral1
Sample
SCriptHookSMPC v1.0.2-1288-v1-0-2-1668741173.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SCriptHookSMPC v1.0.2-1288-v1-0-2-1668741173.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
SMPCScriptHookLauncher.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
SMPCScriptHookLauncher.exe
Resource
win10v2004-20230824-en
Behavioral task
behavioral5
Sample
ScriptHookSMPC.dll
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
ScriptHookSMPC.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
ScriptHookSMPC.ini
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
ScriptHookSMPC.ini
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
ScriptHookSMPC.log
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
ScriptHookSMPC.log
Resource
win10v2004-20230824-en
Behavioral task
behavioral11
Sample
ScriptHookSMPC.ttf
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
ScriptHookSMPC.ttf
Resource
win10v2004-20230703-en
General
-
Target
ScriptHookSMPC.ini
-
Size
859B
-
MD5
c80f89db5601aa366947b0cc65418801
-
SHA1
19d17db144dd990c935f1d4f8883a5b0b6f4b96d
-
SHA256
152cf45dfd10b735fe45bc989decb9e59a360f961468e9b21c0418137e12764d
-
SHA512
d9f7a7d18a61a36b9e6c56f2aa354a68bb6437b000f1853c98b47008a38cac75927cefa560e16d6cee68b084dfd4d578746a8fc85804323b9a597355eab3624b
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2532 NOTEPAD.EXE