Overview

overview

7

Static

static

3

JIGUtility...zip.7z

windows10-2004-x64

7

JIGUtility...12.zip

windows10-2004-x64

1

JIGUtility....2.pdf

windows10-2004-x64

1

JIGUtility...SC.pdf

windows10-2004-x64

1

JIGUtility...PS.cmd

windows10-2004-x64

1

JIGUtility...LS.cmd

windows10-2004-x64

1

JIGUtility...rd.exe

windows10-2004-x64

1

JIGUtility...OP.pdf

windows10-2004-x64

1

JIGUtility...CT.exe

windows10-2004-x64

1

JIGUtility...CT.lua

windows10-2004-x64

3

JIGUtility...signed

windows10-2004-x64

3

JIGUtility...64.sys

windows10-2004-x64

1

JIGUtility...de.ini

windows10-2004-x64

1

JIGUtility...rm.ini

windows10-2004-x64

1

JIGUtility...de.ini

windows10-2004-x64

1

JIGUtility...re.dll

windows10-2004-x64

3

JIGUtility...e4.dll

windows10-2004-x64

3

JIGUtility...me.txt

windows10-2004-x64

1

JIGUtility...og.dll

windows10-2004-x64

1

JIGUtility...00.dll

windows10-2004-x64

3

JIGUtility...00.dll

windows10-2004-x64

3

JIGUtility...un.bat

windows10-2004-x64

1

JIGUtility....0.exe

windows10-2004-x64

7

JIGUtility...NV.pdf

windows10-2004-x64

1

JIGUtility...me.txt

windows10-2004-x64

1

Resubmissions

02-04-2024 18:02

240402-wmv86shb83 7

02-04-2024 17:49

240402-wd8g5sgh3s 7

Analysis

  • max time kernel
    1156s
  • max time network
    1162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-04-2024 18:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/EcPlatform.ini

  • Size

    237B

  • MD5

    41054c96cba986541f4d6a928504a9ae

  • SHA1

    598ebc37e37dfbc762edae22146109433a187970

  • SHA256

    0c2e582fee6614db75179afe78e8e681b935fb22dea7923085e2d5b5b20b4c63

  • SHA512

    a9b0d5e010fd8dd915c87b93d26149d219388949798763193e4561cb7ce1b8cd0b1577e84e9a06a5472309648163bf75890123d025424a913c4ecb2045824985

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\JIGUtility_V2.0.8.0_20230112\ASUSR_ParsingRecord\ASUSR_ParsingRecord\EcPlatform.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads