Analysis
-
max time kernel
121s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/03/2024, 23:25
Static task
static1
Behavioral task
behavioral1
Sample
MW3.FoV.Changer.v1.9.446.0 2.zip
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
MW3.FoV.Changer.v1.9.446.0 2.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
MW3 FoV Changer.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
MW3 FoV Changer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Readme.txt
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Readme.txt
Resource
win10v2004-20240226-en
General
-
Target
Readme.txt
-
Size
2KB
-
MD5
04a19544fa536c828d6955567f962a7b
-
SHA1
2b1956d5fd1e4b9ca897329b375542225f0f2733
-
SHA256
bd0fcc26e2e494dfce1b63e42fed9bdbb9c317db8921334f105c6be1c2f8512f
-
SHA512
d5018ed1bbb32d3bb1f3f6c019fa5160954d33ec8e5770db00d5265982e4aa932b5d677a5501d53d7b5d46bf6eedf30a447812907572a3e421e1fc189a1c0096
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3020 NOTEPAD.EXE