Overview

overview

7

Static

static

3

JIGUtility...zip.7z

windows10-2004-x64

7

JIGUtility...12.zip

windows10-2004-x64

1

JIGUtility....2.pdf

windows10-2004-x64

1

JIGUtility...SC.pdf

windows10-2004-x64

1

JIGUtility...PS.cmd

windows10-2004-x64

1

JIGUtility...LS.cmd

windows10-2004-x64

1

JIGUtility...rd.exe

windows10-2004-x64

1

JIGUtility...OP.pdf

windows10-2004-x64

1

JIGUtility...CT.exe

windows10-2004-x64

1

JIGUtility...CT.lua

windows10-2004-x64

3

JIGUtility...signed

windows10-2004-x64

3

JIGUtility...64.sys

windows10-2004-x64

1

JIGUtility...de.ini

windows10-2004-x64

1

JIGUtility...rm.ini

windows10-2004-x64

1

JIGUtility...de.ini

windows10-2004-x64

1

JIGUtility...re.dll

windows10-2004-x64

3

JIGUtility...e4.dll

windows10-2004-x64

3

JIGUtility...me.txt

windows10-2004-x64

1

JIGUtility...og.dll

windows10-2004-x64

1

JIGUtility...00.dll

windows10-2004-x64

3

JIGUtility...00.dll

windows10-2004-x64

3

JIGUtility...un.bat

windows10-2004-x64

1

JIGUtility....0.exe

windows10-2004-x64

7

JIGUtility...NV.pdf

windows10-2004-x64

1

JIGUtility...me.txt

windows10-2004-x64

1

Resubmissions

02/04/2024, 18:02

240402-wmv86shb83 7

02/04/2024, 17:49

240402-wd8g5sgh3s 7

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/04/2024, 17:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/Readme.txt

  • Size

    518B

  • MD5

    a0684d21a3ca683d64e0e2c31304eaff

  • SHA1

    8051b5274800266e483fa5831cef2d7be25a1c26

  • SHA256

    84759f01b9ef14fec30d3ef1ed0a138d95b0fea01092f307f92f105ab061ac4e

  • SHA512

    e163fb1f8facd4f40b2889986a37631a3cf13b8256b36ad4c0d19c0447566bfd9a1658f5192864dd3e1fe7b8debbc70956f7ccce4b81f072a9b5c25c74191d7b

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\JIGUtility_V2.0.8.0_20230112\ASUSR_ParsingRecord\ASUSR_ParsingRecord\Readme.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads