Overview
overview
3Static
static
3isaac-Emy.zip
windows7-x64
1isaac-Emy.zip
windows10-2004-x64
1resources/...irth.a
windows7-x64
3resources/...irth.a
windows10-2004-x64
3resources/...h_jp.a
windows7-x64
3resources/...h_jp.a
windows10-2004-x64
3resources/...h_kr.a
windows7-x64
3resources/...h_kr.a
windows10-2004-x64
3resources/...rthp.a
windows7-x64
3resources/...rthp.a
windows10-2004-x64
3resources/...p_jp.a
windows7-x64
3resources/...p_jp.a
windows10-2004-x64
3resources/...p_kr.a
windows7-x64
3resources/...p_kr.a
windows10-2004-x64
3resources/...ions.a
windows7-x64
3resources/...ions.a
windows10-2004-x64
3resources/...nfig.a
windows7-x64
3resources/...nfig.a
windows10-2004-x64
3resources/...onts.a
windows7-x64
3resources/...onts.a
windows10-2004-x64
3resources/...hics.a
windows7-x64
3resources/...hics.a
windows10-2004-x64
3resources/...usic.a
windows7-x64
3resources/...usic.a
windows10-2004-x64
3resources/...me.txt
windows7-x64
1resources/...me.txt
windows10-2004-x64
1resources/...ore.so
macos-10.15-amd64
1resources/...tp.lua
windows7-x64
3resources/...tp.lua
windows10-2004-x64
3resources/...rl.lua
windows7-x64
3resources/...rl.lua
windows10-2004-x64
3savedatapath.txt
windows7-x64
1Analysis
-
max time kernel
141s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
19/01/2024, 20:11
Static task
static1
Behavioral task
behavioral1
Sample
isaac-Emy.zip
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
isaac-Emy.zip
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
resources/packed/afterbirth.a
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
resources/packed/afterbirth.a
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
resources/packed/afterbirth_jp.a
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
resources/packed/afterbirth_jp.a
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
resources/packed/afterbirth_kr.a
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
resources/packed/afterbirth_kr.a
Resource
win10v2004-20231222-en
Behavioral task
behavioral9
Sample
resources/packed/afterbirthp.a
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
resources/packed/afterbirthp.a
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
resources/packed/afterbirthp_jp.a
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
resources/packed/afterbirthp_jp.a
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
resources/packed/afterbirthp_kr.a
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
resources/packed/afterbirthp_kr.a
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
resources/packed/animations.a
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
resources/packed/animations.a
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
resources/packed/config.a
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
resources/packed/config.a
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
resources/packed/fonts.a
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
resources/packed/fonts.a
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
resources/packed/graphics.a
Resource
win7-20231129-en
Behavioral task
behavioral22
Sample
resources/packed/graphics.a
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
resources/packed/music.a
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
resources/packed/music.a
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
resources/packed/readme.txt
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
resources/packed/readme.txt
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
resources/scripts/socket/core.so
Resource
macos-20231201-en
Behavioral task
behavioral28
Sample
resources/scripts/socket/smtp.lua
Resource
win7-20231215-en
Behavioral task
behavioral29
Sample
resources/scripts/socket/smtp.lua
Resource
win10v2004-20231215-en
Behavioral task
behavioral30
Sample
resources/scripts/socket/url.lua
Resource
win7-20231215-en
Behavioral task
behavioral31
Sample
resources/scripts/socket/url.lua
Resource
win10v2004-20231222-en
Behavioral task
behavioral32
Sample
savedatapath.txt
Resource
win7-20231215-en
General
-
Target
resources/packed/readme.txt
-
Size
1KB
-
MD5
4ac156d5679a86e5396225bed3c9e966
-
SHA1
241138bb351f522641e2741a79efbe10882d3fbe
-
SHA256
5816f59298d1894ded363a1eca0f4ad293e7f3005e1dcb78b8113e5ffa8f6f0c
-
SHA512
82ca1ba9922a5809d9bab76799e9b5e7766e76ec1e3e43c4d6c15ff016bcb759af837bedde6d1c62fb3cab8cdea19ec7930dc383087194f20da57cedbb78cbf1
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4036 NOTEPAD.EXE