Overview
overview
10Static
static
3Client.rar
windows7-x64
3Client.rar
windows10-2004-x64
3Loader/Ins...on.txt
windows7-x64
1Loader/Ins...on.txt
windows10-2004-x64
1Loader/Loader.exe
windows7-x64
10Loader/Loader.exe
windows10-2004-x64
10Loader/Loader.js
windows7-x64
1Loader/Loader.js
windows10-2004-x64
1Loader/New...on.dll
windows7-x64
1Loader/New...on.dll
windows10-2004-x64
1Loader/bin...rB.exe
windows7-x64
1Loader/bin...rB.exe
windows10-2004-x64
1Loader/bin...rS.exe
windows7-x64
1Loader/bin...rS.exe
windows10-2004-x64
4Loader/bin/scv.jar
windows7-x64
1Loader/bin/scv.jar
windows10-2004-x64
1Loader/pac..._datas
windows7-x64
1Loader/pac..._datas
windows10-2004-x64
1Loader/pac...prefix
windows7-x64
1Loader/pac...prefix
windows10-2004-x64
1Loader/pac...tingss
windows7-x64
1Loader/pac...tingss
windows10-2004-x64
1Loader/use...ersion
windows7-x64
1Loader/use...ersion
windows10-2004-x64
1Loader/use...ersion
windows7-x64
1Loader/use...ersion
windows10-2004-x64
1Loader/xNet.dll
windows7-x64
1Loader/xNet.dll
windows10-2004-x64
1Analysis
-
max time kernel
125s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
08/10/2023, 23:18
Static task
static1
Behavioral task
behavioral1
Sample
Client.rar
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Client.rar
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
Loader/Instruction.txt
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Loader/Instruction.txt
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
Loader/Loader.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
Loader/Loader.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
Loader/Loader.js
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
Loader/Loader.js
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
Loader/Newtonsoft.Json.dll
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
Loader/Newtonsoft.Json.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
Loader/bin/UbuilderB.exe
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Loader/bin/UbuilderB.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
Loader/bin/UbuilderS.exe
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
Loader/bin/UbuilderS.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
Loader/bin/scv.jar
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
Loader/bin/scv.jar
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
Loader/packages/key_datas
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
Loader/packages/key_datas
Resource
win10v2004-20230915-en
Behavioral task
behavioral19
Sample
Loader/packages/prefix
Resource
win7-20230831-en
Behavioral task
behavioral20
Sample
Loader/packages/prefix
Resource
win10v2004-20230915-en
Behavioral task
behavioral21
Sample
Loader/packages/settingss
Resource
win7-20230831-en
Behavioral task
behavioral22
Sample
Loader/packages/settingss
Resource
win10v2004-20230915-en
Behavioral task
behavioral23
Sample
Loader/user_data/cache/version
Resource
win7-20230831-en
Behavioral task
behavioral24
Sample
Loader/user_data/cache/version
Resource
win10v2004-20230915-en
Behavioral task
behavioral25
Sample
Loader/user_data/media_cache/version
Resource
win7-20230831-en
Behavioral task
behavioral26
Sample
Loader/user_data/media_cache/version
Resource
win10v2004-20230915-en
Behavioral task
behavioral27
Sample
Loader/xNet.dll
Resource
win7-20230831-en
Behavioral task
behavioral28
Sample
Loader/xNet.dll
Resource
win10v2004-20230915-en
General
-
Target
Loader/Instruction.txt
-
Size
183B
-
MD5
b57910c41a8571e211bc900e37885713
-
SHA1
606d2089183224c46d1dd66d59091882975c797b
-
SHA256
b108bda6696d641c1c123d3aae721aeac477d67f727ad1f8ef6f285fe87a21ce
-
SHA512
b0923613db32a85fba213ffac424d5994df577fa4f7b99ac483b7482042725d5b277d14044dff4813a7bdc7c60d43b43d5f680769103aeecaef042afde71ce50
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1108 NOTEPAD.EXE