Analysis
-
max time kernel
117s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
08/01/2024, 19:11
Static task
static1
Behavioral task
behavioral1
Sample
BCC - ReealLion -20240108T185820Z-001.zip
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
BCC - ReealLion -20240108T185820Z-001.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
BCC - ReealLion /Boris FX Continuum Adobe 2023 v16.0.1 Win ReealLion.zip
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
BCC - ReealLion /Boris FX Continuum Adobe 2023 v16.0.1 Win ReealLion.zip
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
BCC - ReealLion /Password.txt
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
BCC - ReealLion /Password.txt
Resource
win10v2004-20231215-en
General
-
Target
BCC - ReealLion /Password.txt
-
Size
74B
-
MD5
08609c83a1cc369ebfac8a8431e4f12e
-
SHA1
806895512e0f873ec54ff19a762900fcb2ccaeeb
-
SHA256
3a7322c17a2eafaf1812cc83e9dc61bc1faf1c66e7837fb6127b77d1d01c4b75
-
SHA512
86f7df5bf9e2ddf150d970acbb1a5469e39361369a5a61037c2ac1b55e8efb7c5e65719857adbfcce5ac3681ceeb844ab85738761d356d54236386681799ee40
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1708 NOTEPAD.EXE