Overview

overview

7

Static

static

3

eclipse.zip

windows10-2004-x64

1

colors/Ars...en.txt

windows10-2004-x64

1

colors/Ars...nk.txt

windows10-2004-x64

1

colors/Ars...le.txt

windows10-2004-x64

1

colors/Ars...ow.txt

windows10-2004-x64

1

colors/Blu...al.txt

windows10-2004-x64

1

colors/Cou...ox.txt

windows10-2004-x64

1

colors/Da ...ay.txt

windows10-2004-x64

1

colors/Da ...ag.txt

windows10-2004-x64

1

colors/DaDuels.txt

windows10-2004-x64

1

colors/HSV...ag.txt

windows10-2004-x64

1

colors/Nam...V2.txt

windows10-2004-x64

1

colors/Pis...ot.txt

windows10-2004-x64

1

colors/Pix...le.txt

windows10-2004-x64

1

colors/Reflex.txt

windows10-2004-x64

1

colors/Uni...V2.txt

windows10-2004-x64

1

colors/da ...el.txt

windows10-2004-x64

1

colors/no ...ng.txt

windows10-2004-x64

1

colors/strucid v2.txt

windows10-2004-x64

1

colors/strucid.txt

windows10-2004-x64

1

colors/test.txt

windows10-2004-x64

1

main.exe

windows10-2004-x64

7

main.pyc

windows10-2004-x64

3

settings/ReadMe.txt

windows10-2004-x64

1

settings/Settings.txt

windows10-2004-x64

1

settings/i...et.png

windows10-2004-x64

3

settings/i...ma.png

windows10-2004-x64

3

storage/Font.otf

windows10-2004-x64

7

storage/Watermark.otf

windows10-2004-x64

7

storage/Wa...on.png

windows10-2004-x64

3

storage/th...nd.png

windows10-2004-x64

3

Analysis

  • max time kernel
    138s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-02-2024 03:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    colors/DaDuels.txt

  • Size

    41B

  • MD5

    55f181c98ee66d3bc1472557d284e034

  • SHA1

    68b2833f1f5fc9e3334c39ba0ffe39a6972e7c8c

  • SHA256

    8191e30bb0e9b5c8d8e09901e7e51b59f432bc8f3c9c30340f410cb881abf41a

  • SHA512

    f80428d91408b8fb148156ba53c6c252c606a0cdd2eeff1c29fe1142d60dca7f2a652ee363b3eb3cebc5d3ffe95875d340ad5b9957c7699fd16dd2a4c7710583

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\colors\DaDuels.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads