Overview
overview
6Static
static
1npp.8.6.po...ad.exe
windows7-x64
1npp.8.6.po...ad.exe
windows10-1703-x64
1npp.8.6.po...ad.exe
windows10-2004-x64
1npp.8.6.po...ad.exe
windows11-21h2-x64
1npp.8.6.po...UP.exe
windows7-x64
1npp.8.6.po...UP.exe
windows10-1703-x64
6npp.8.6.po...UP.exe
windows10-2004-x64
6npp.8.6.po...UP.exe
windows11-21h2-x64
4Resubmissions
28/01/2024, 15:06
240128-sg3jhsdhgm628/01/2024, 15:00
240128-sdn7qacba7626/01/2024, 12:16
240126-pfs2xaegbk1026/01/2024, 12:02
240126-n7p9nadbb2117/01/2024, 19:57
240117-yn88jadfbj517/01/2024, 19:56
240117-ynp5naebg9116/01/2024, 18:32
240116-w6l5lshdb76Analysis
- max time kernel
70s - max time network
76s - platform
windows10-1703_x64 - resource
win10-20231215-en - resource tags
arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system - submitted
28/01/2024, 15:00
Static task
static1
Behavioral task
behavioral1
Sample
npp.8.6.portable.x64/notepad.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
npp.8.6.portable.x64/notepad.exe
Resource
win10-20231215-en
Behavioral task
behavioral3
Sample
npp.8.6.portable.x64/notepad.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral4
Sample
npp.8.6.portable.x64/notepad.exe
Resource
win11-20231215-en
Behavioral task
behavioral5
Sample
npp.8.6.portable.x64/updater/GUP.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
npp.8.6.portable.x64/updater/GUP.exe
Resource
win10-20231215-en
Behavioral task
behavioral7
Sample
npp.8.6.portable.x64/updater/GUP.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral8
Sample
npp.8.6.portable.x64/updater/GUP.exe
Resource
win11-20231215-en
General
- Target npp.8.6.portable.x64/notepad.exe
- Size 6.8MB
- Sample240128-sdn7qacba7
- SHA256 746bbdd8c754b0ac18a226d2a1cc68792c948033932f5723981a2b5f5684d310
- MD5 ae07a5be89978600f3094c66ac719eb2
- SHA1 a281e662b6d1cca0d54cab01a0064b62e7f1f103
- SHA512 d90f42fb42cf2f5f3ca8d25603666a5b73f11fcc3404597b1c023768cf21083abe0d2b19f3ae2499fba469474e818200ca9937b48ee5406f15bd6f9ea3996151
- SSDEEP 49152:MuX8nT7KkzbaJ/I1ER5S/qlC1VQHqpyhdRoMSoAMMho/WVEK7yToMoK2w74CS5hg:5/ICR5wPy+elgIXoGJUR6eP4mTr/moG
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2856 notepad.exe