Overview

overview

6

Static

static

6

mobikin-er...id.exe

windows7-x64

4

mobikin-er...id.exe

windows10-2004-x64

4

Driver/goo...er.zip

windows7-x64

1

Driver/goo...er.zip

windows10-2004-x64

1

I18n/de_DE/strings.mo

windows7-x64

3

I18n/de_DE/strings.mo

windows10-2004-x64

3

I18n/en_US/strings.mo

windows7-x64

3

I18n/en_US/strings.mo

windows10-2004-x64

3

I18n/es_ES/strings.mo

windows7-x64

3

I18n/es_ES/strings.mo

windows10-2004-x64

3

I18n/fr_FR/strings.mo

windows7-x64

3

I18n/fr_FR/strings.mo

windows10-2004-x64

3

I18n/it_IT/strings.mo

windows7-x64

3

I18n/it_IT/strings.mo

windows10-2004-x64

3

I18n/ja_JP/strings.mo

windows7-x64

3

I18n/ja_JP/strings.mo

windows10-2004-x64

3

I18n/pt_PT/strings.mo

windows7-x64

3

I18n/pt_PT/strings.mo

windows10-2004-x64

3

I18n/zh_CN/strings.mo

windows7-x64

3

I18n/zh_CN/strings.mo

windows10-2004-x64

I18n/zh_TW/strings.mo

windows7-x64

3

I18n/zh_TW/strings.mo

windows10-2004-x64

3

License/li...br.txt

windows7-x64

1

License/li...br.txt

windows10-2004-x64

1

License/li...cn.txt

windows7-x64

1

License/li...cn.txt

windows10-2004-x64

1

License/li...de.txt

windows7-x64

1

License/li...de.txt

windows10-2004-x64

1

License/li...es.txt

windows7-x64

1

License/li...es.txt

windows10-2004-x64

1

License/li...fr.txt

windows7-x64

1

License/li...fr.txt

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21-04-2024 06:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    License/license_fr.txt

  • Size

    34KB

  • MD5

    272bd12307ecf6a0d41ef291a4720472

  • SHA1

    2aa9c38d4dfc0df49a61254bf4bcf02cca3ada44

  • SHA256

    720ef89078b6815838bfc0ffc09d993b981a6ad15811388288c2672e5ff12ddf

  • SHA512

    8d155f1e04a4f83526ae177ac02c238b69a273f3dca798140917f3906deeaf1d4d2fadc807f2ebf7cb7fa884503d532699cd4098f9780d76cf998f57a6b103b4

  • SSDEEP

    768:OTLcz/ojKW6Rqdj3gnTvcSh0jUzEc11IehDWYuOks:S+FeT/sS09

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\License\license_fr.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads