Overview

overview

6

Static

static

3

nikkeminil...tl.exe

windows7-x64

6

nikkeminil...tl.exe

windows10-2004-x64

6

$PLUGINSDI...in.dll

windows7-x64

3

$PLUGINSDI...in.dll

windows10-2004-x64

3

LogConfig.ini

windows7-x64

1

LogConfig.ini

windows10-2004-x64

1

Minidown.xml

windows7-x64

1

Minidown.xml

windows10-2004-x64

1

bugreport.ini

windows7-x64

1

bugreport.ini

windows10-2004-x64

1

error_code.json

windows7-x64

3

error_code.json

windows10-2004-x64

3

icon.ico

windows7-x64

3

icon.ico

windows10-2004-x64

3

install_script.dat

windows7-x64

3

install_script.dat

windows10-2004-x64

3

nikkeminiloader.exe

windows7-x64

6

nikkeminiloader.exe

windows10-2004-x64

6

res.zip

windows7-x64

1

res.zip

windows10-2004-x64

1

browse_t_hover.png

windows7-x64

3

browse_t_hover.png

windows10-2004-x64

3

[email protected]

windows7-x64

3

[email protected]

windows10-2004-x64

3

browse_t_normal.png

windows7-x64

3

browse_t_normal.png

windows10-2004-x64

3

[email protected]

windows7-x64

3

[email protected]

windows10-2004-x64

3

browse_t_pressed.png

windows7-x64

3

browse_t_pressed.png

windows10-2004-x64

3

[email protected]

windows7-x64

3

[email protected]

windows10-2004-x64

3

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/04/2024, 02:11

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    LogConfig.ini

  • Size

    119B

  • MD5

    d964fa19360cab52e1192c890f5d5c6f

  • SHA1

    bd39d8cbe9ddf9e5601f28c53683f01ee134d22c

  • SHA256

    dd6589e9649d503fabd58da196df3b675e377ea3059fcff83f48f162fe67ccbb

  • SHA512

    17a5c0a012346b14a12687f16cf9c473f35722d4957c5c22e389ee7af15a8799a8f13ad7e353383bfb1b67513132839124c5ede376254c3271b5fc9bc1bfacc1

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\LogConfig.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2924

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads