Resubmissions

02-04-2024 18:02

240402-wmv86shb83 7

02-04-2024 17:49

240402-wd8g5sgh3s 7

Analysis

  • max time kernel
    448s
  • max time network
    1173s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-04-2024 18:02

General

  • Target

    JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/BiosPostErrorCode.ini

  • Size

    5KB

  • MD5

    5e5d166921989e99404c460cd9048731

  • SHA1

    593d718b7e34fb8076f4fd3885ddfc986087dd19

  • SHA256

    53f1f1957f6d43bce05e2ab61f83e7edddc9303fc525439a3171ae1cab8f3e91

  • SHA512

    b3867ba6acee85e612321a2f1f862b63a9f58c62e1eb0aa7aed79aa777fd18664a0ba63dab7fd3400cc81b94d975cc286525404845bc7ca9fba90726a4dce38a

  • SSDEEP

    96:6IuZ/iXw7BZ+tWcjJ6uWMxp6TF4WbSF0vKyK10kTGEGbKla0lHPHg:675iXwt8tWCJwxEGb+a4vA

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\JIGUtility_V2.0.8.0_20230112\ASUSR_ParsingRecord\ASUSR_ParsingRecord\BiosPostErrorCode.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads