Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/02/2024, 10:32
Static task
static1
Behavioral task
behavioral1
Sample
TZ.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
TZ.zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Installer.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Installer.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
lismoi.txt
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
lismoi.txt
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
readme.txt
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
readme.txt
Resource
win10v2004-20240221-en
General
-
Target
lismoi.txt
-
Size
1KB
-
MD5
3aa19c246611b81a7ec9c1af76f670a0
-
SHA1
4ed681c11278dca4b54c67e15ac45ef8cd499dbe
-
SHA256
998f6bbdc0d3977ae439d358fc9a87da7d2524704566e3f2c8e67d23c4b0e9b3
-
SHA512
7e5723bc5a9ba4615b38e3c152b3ef29bb163ea5ba8888317eee2b823afe7873716e843c35d6ce143328432157f23a55f526f86088213b782cdbc8796b6f0d98
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2992 NOTEPAD.EXE