Overview

overview

6

Static

static

1

npp.8.6.po...ad.exe

windows7-x64

1

npp.8.6.po...ad.exe

windows10-1703-x64

1

npp.8.6.po...ad.exe

windows10-2004-x64

1

npp.8.6.po...ad.exe

windows11-21h2-x64

1

npp.8.6.po...UP.exe

windows7-x64

1

npp.8.6.po...UP.exe

windows10-1703-x64

6

npp.8.6.po...UP.exe

windows10-2004-x64

6

npp.8.6.po...UP.exe

windows11-21h2-x64

4

Resubmissions

28/01/2024, 15:06

240128-sg3jhsdhgm6

28/01/2024, 15:00

240128-sdn7qacba76

26/01/2024, 12:16

240126-pfs2xaegbk10

26/01/2024, 12:02

240126-n7p9nadbb21

17/01/2024, 19:57

240117-yn88jadfbj5

17/01/2024, 19:56

240117-ynp5naebg91

16/01/2024, 18:32

240116-w6l5lshdb76

Sharing

Copy URL Twitter E-mail

General

  • Target
    npp.8.6.portable.x64.zip
  • Size 8.2MB
  • Sample240128-sdn7qacba7
  • SHA256 bef04e3b2b81f2dee39c42ab9be781f3db0059ec722aeee3b5434c2e63512a68
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Targets

    • Target
      npp.8.6.portable.x64/notepad.exe
    • Size 6.8MB
    • SHA256 746bbdd8c754b0ac18a226d2a1cc68792c948033932f5723981a2b5f5684d310
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4
    • Target
      npp.8.6.portable.x64/updater/GUP.exe
    • Size 818KB
    • SHA256 8038960c66ec29e9ee0f027491c8349a158025faee39d069219b5a3297134197
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral5behavioral6behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks