Overview
overview
10Static
static
3wufuc_v1.0...d4.zip
windows7-x64
1wufuc/COPYING.txt
windows7-x64
1wufuc/Donate.url
windows7-x64
6wufuc/Help...se.url
windows7-x64
1wufuc/Help...ue.url
windows7-x64
1wufuc/Rest...rv.reg
windows7-x64
10wufuc/inst...uc.bat
windows7-x64
1wufuc/unin...uc.bat
windows7-x64
1wufuc/version.txt
windows7-x64
1wufuc/wufu...ub.url
windows7-x64
1wufuc/wufuc32.dll
windows7-x64
1wufuc/wufuc64.dll
windows7-x64
1wufuc/wufu...sk.xml
windows7-x64
1Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-04-2024 07:58
Static task
static1
Behavioral task
behavioral1
Sample
wufuc_v1.0.1.201-a52637d4.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
wufuc/COPYING.txt
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
wufuc/Donate.url
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
wufuc/Help and Support/Latest release.url
Resource
win7-20240221-en
Behavioral task
behavioral5
Sample
wufuc/Help and Support/Report an issue.url
Resource
win7-20240220-en
Behavioral task
behavioral6
Sample
wufuc/Restore_wuauserv.reg
Resource
win7-20240215-en
Behavioral task
behavioral7
Sample
wufuc/install_wufuc.bat
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
wufuc/uninstall_wufuc.bat
Resource
win7-20240221-en
Behavioral task
behavioral9
Sample
wufuc/version.txt
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
wufuc/wufuc on GitHub.url
Resource
win7-20240221-en
Behavioral task
behavioral11
Sample
wufuc/wufuc32.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
wufuc/wufuc64.dll
Resource
win7-20240220-en
Behavioral task
behavioral13
Sample
wufuc/wufuc_ScheduledTask.xml
Resource
win7-20231129-en
General
-
Target
wufuc/COPYING.txt
-
Size
34KB
-
MD5
9c25e1cdc3b5122842a6a70fab49a522
-
SHA1
2ea9f02239dc6b5fdbfff01fcdf85bcc8c13667c
-
SHA256
53927bd0b739d38c87a0a82236fd9b070c2dfff11c0c119be50372005d5047ad
-
SHA512
7a0429020657fcf4b6035c393b10a98978360e99f3b0a092373057378a406bf016d8a96f41e3a4ed023343ce6805cd94cb5861df81503d105291efc51119e3c9
-
SSDEEP
768:A7Y+tNdSz3ZlqXOWoInuzx3Y8N3WiAD0Jv:AVtNIq1uzZY1q
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid process 2340 NOTEPAD.EXE