Analysis
-
max time kernel
363s -
max time network
369s -
platform
windows7_x64 -
resource
win7-20240221-de -
resource tags
arch:x64arch:x86image:win7-20240221-delocale:de-deos:windows7-x64systemwindows -
submitted
10/03/2024, 12:40
Behavioral task
behavioral1
Sample
CreateStudio/CreateStudio.exe
Resource
win7-20240221-de
Behavioral task
behavioral2
Sample
CreateStudio/CreateStudio.exe
Resource
win10v2004-20240226-de
Behavioral task
behavioral3
Sample
main.pyc
Resource
win7-20240221-de
Behavioral task
behavioral4
Sample
main.pyc
Resource
win10v2004-20240226-de
Behavioral task
behavioral5
Sample
CreateStudio/index.txt
Resource
win7-20240221-de
Behavioral task
behavioral6
Sample
CreateStudio/index.txt
Resource
win10v2004-20240226-de
General
-
Target
CreateStudio/index.txt
-
Size
10B
-
MD5
cd99526f645803259afed850024cd9f1
-
SHA1
4003487cfc0fce80bcc6692fe2d8bf0807b5bdd9
-
SHA256
16071014e3318027a6ddf9268305bd5f7696a2794bed486d872f65e62cb24a3a
-
SHA512
bf24eac8f1a7081b05c58c94a2cd0b11f5c3b651d09608d1f3ece417cd59a3e75675c7d578251ab7c7ccd347291545e443670a8712dc59cefe3e595691d52ef3
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2600 NOTEPAD.EXE