Overview
overview
1Static
static
1threatfeed...13.zip
windows7-x64
1threatfeed...13.zip
windows10-2004-x64
1asn_ids_mo...ro.txt
windows7-x64
1asn_ids_mo...ro.txt
windows10-2004-x64
1threatfeed...13.csv
windows7-x64
1threatfeed...13.csv
windows10-2004-x64
1threatfeed...13.csv
windows7-x64
1threatfeed...13.csv
windows10-2004-x64
1threatfeed...13.csv
windows7-x64
1threatfeed...13.csv
windows10-2004-x64
1threatfeed...13.csv
windows7-x64
1threatfeed...13.csv
windows10-2004-x64
1threats_mo...ro.txt
windows7-x64
1threats_mo...ro.txt
windows10-2004-x64
1Resubmissions
15/03/2024, 11:33
240315-npa21shd64 115/03/2024, 11:30
240315-nl4vxsfb7y 115/03/2024, 11:20
240315-nfyfysfa4w 115/03/2024, 11:16
240315-nc6m6ahb54 115/03/2024, 11:07
240315-m762qseg7x 115/03/2024, 11:03
240315-m5tcvseg2z 115/03/2024, 11:01
240315-m43j5seg2s 115/03/2024, 10:54
240315-mzm9nagg58 1Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/03/2024, 10:54
Static task
static1
Behavioral task
behavioral1
Sample
threatfeed_202403_07-13.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
threatfeed_202403_07-13.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
asn_ids_montenegro.txt
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
asn_ids_montenegro.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
threatfeed_domain_202403_07-13.csv
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
threatfeed_domain_202403_07-13.csv
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
threatfeed_hash_202403_07-13.csv
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
threatfeed_hash_202403_07-13.csv
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
threatfeed_ip_202403_07-13.csv
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
threatfeed_ip_202403_07-13.csv
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
threatfeed_url_202403_07-13.csv
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
threatfeed_url_202403_07-13.csv
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
threats_montenegro.txt
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
threats_montenegro.txt
Resource
win10v2004-20240226-en
General
-
Target
asn_ids_montenegro.txt
-
Size
586B
-
MD5
543a275e2ce2dc7283e6669c594fc6f2
-
SHA1
f05c98fc92f04b68fc6594ea6d158a16243bf228
-
SHA256
b9fbc4b215692c1d71f8f48f3ea6702f3486c4f8047be8cad0d3f48893b23875
-
SHA512
99ed2be521667077c8e543a607f4453d7beea18ca562293455db8a300f95a297345fe60090d1a557823f2edae7affe0654ab736494f55783e2b0b634096cdb44
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 664 NOTEPAD.EXE