Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/02/2024, 19:14
Behavioral task
behavioral1
Sample
Aurora V3.1.rar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Aurora V3.1.rar
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Aurora/Aurora.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Aurora/Aurora.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
Aurora/scripts/scripts.dll
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Aurora/scripts/scripts.dll
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
README.txt
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
README.txt
Resource
win10v2004-20240221-en
General
-
Target
README.txt
-
Size
26B
-
MD5
7ff5e4de2e2d15161cb97dcb8d764928
-
SHA1
40cfe038183f43ac5822957e606b40e845448cf3
-
SHA256
95f75442d82a6b66a53835acffdc3278eb2fc9c56fe13dfce3cb190f9154aa3d
-
SHA512
2808c1285562936f68174fe523b31b27a6b7a61df1e61fd5b9de57b5eeaa6aadddfdd062c31fada438436336aeaa0e90cdece4f42827d60dcb272c90988a2fbe
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1688 NOTEPAD.EXE