Overview

overview

7

Static

static

3

JIGUtility...zip.7z

windows10-2004-x64

7

JIGUtility...12.zip

windows10-2004-x64

1

JIGUtility....2.pdf

windows10-2004-x64

1

JIGUtility...SC.pdf

windows10-2004-x64

1

JIGUtility...PS.cmd

windows10-2004-x64

1

JIGUtility...LS.cmd

windows10-2004-x64

1

JIGUtility...rd.exe

windows10-2004-x64

1

JIGUtility...OP.pdf

windows10-2004-x64

1

JIGUtility...CT.exe

windows10-2004-x64

1

JIGUtility...CT.lua

windows10-2004-x64

3

JIGUtility...signed

windows10-2004-x64

3

JIGUtility...64.sys

windows10-2004-x64

1

JIGUtility...de.ini

windows10-2004-x64

1

JIGUtility...rm.ini

windows10-2004-x64

1

JIGUtility...de.ini

windows10-2004-x64

1

JIGUtility...re.dll

windows10-2004-x64

3

JIGUtility...e4.dll

windows10-2004-x64

3

JIGUtility...me.txt

windows10-2004-x64

1

JIGUtility...og.dll

windows10-2004-x64

1

JIGUtility...00.dll

windows10-2004-x64

3

JIGUtility...00.dll

windows10-2004-x64

3

JIGUtility...un.bat

windows10-2004-x64

1

JIGUtility....0.exe

windows10-2004-x64

7

JIGUtility...NV.pdf

windows10-2004-x64

1

JIGUtility...me.txt

windows10-2004-x64

1

Resubmissions

02/04/2024, 18:02

240402-wmv86shb83 7

02/04/2024, 17:49

240402-wd8g5sgh3s 7

Analysis

  • max time kernel
    80s
  • max time network
    168s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/04/2024, 17:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/BiosPostErrorCode.ini

  • Size

    5KB

  • MD5

    5e5d166921989e99404c460cd9048731

  • SHA1

    593d718b7e34fb8076f4fd3885ddfc986087dd19

  • SHA256

    53f1f1957f6d43bce05e2ab61f83e7edddc9303fc525439a3171ae1cab8f3e91

  • SHA512

    b3867ba6acee85e612321a2f1f862b63a9f58c62e1eb0aa7aed79aa777fd18664a0ba63dab7fd3400cc81b94d975cc286525404845bc7ca9fba90726a4dce38a

  • SSDEEP

    96:6IuZ/iXw7BZ+tWcjJ6uWMxp6TF4WbSF0vKyK10kTGEGbKla0lHPHg:675iXwt8tWCJwxEGb+a4vA

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\JIGUtility_V2.0.8.0_20230112\ASUSR_ParsingRecord\ASUSR_ParsingRecord\BiosPostErrorCode.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:3136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads