Analysis
-
max time kernel
15s -
max time network
17s -
platform
windows10-1703_x64 -
resource
win10-20240214-en -
resource tags
arch:x64arch:x86image:win10-20240214-enlocale:en-usos:windows10-1703-x64system -
submitted
11-03-2024 15:24
Behavioral task
behavioral1
Sample
Napalm Loader.zip
Resource
win10-20240214-en
windows10-1703-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Napalm Loader.exe
Resource
win10-20240214-en
windows10-1703-x64
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
README.txt
Resource
win10-20240221-en
windows10-1703-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
checksum.txt
Resource
win10-20240214-en
windows10-1703-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
napalm_hook.dll
Resource
win10-20240221-en
windows10-1703-x64
2 signatures
150 seconds
General
-
Target
checksum.txt
-
Size
141B
-
MD5
1e4ce22d63bd09686e40e259eaba2fcb
-
SHA1
47bf0f1e1b8c7524b4c35a41cf08b12f8d68eebc
-
SHA256
ff36d6ddbdfb6e3a2c823a21c191c791ea077f17b7c348f52d798ebaac399c36
-
SHA512
403f51f236efa2f6d854bb700c000a1ac6d4a9a7772f19e55abe7e2602824f360c4861f6832cbaa43b7d97de1aa24fccc807198184b84e0ea51ce71f31dc35a6
Score
1/10
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2192 NOTEPAD.EXE