Overview
overview
7Static
static
3Release.zip
windows10-1703-x64
1Release/Bu...ld.exe
windows10-1703-x64
1Release/Bu...ch.exe
windows10-1703-x64
1Release/Co...or.exe
windows10-1703-x64
1Release/Credits.txt
windows10-1703-x64
1Release/Loader.exe
windows10-1703-x64
7Release/Re...ct.txt
windows10-1703-x64
1Release/Te...ep.mp3
windows10-1703-x64
1Release/Te...FG.ini
windows10-1703-x64
1Release/Te...en.bin
windows10-1703-x64
3Release/Te...ty.txt
windows10-1703-x64
1Release/Te...kt.dll
windows10-1703-x64
1Release/Us...er.exe
windows10-1703-x64
1Analysis
-
max time kernel
128s -
max time network
136s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
04-06-2024 07:38
Static task
static1
Behavioral task
behavioral1
Sample
Release.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Release/Builds/Core Build.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Release/Builds/OwlFetch.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Release/Configurator.exe
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
Release/Credits.txt
Resource
win10-20240404-en
Behavioral task
behavioral6
Sample
Release/Loader.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
Release/Readme b4 Extract.txt
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
Release/Temp/Resources/Beep.mp3
Resource
win10-20240404-en
Behavioral task
behavioral9
Sample
Release/Temp/Resources/CFG.ini
Resource
win10-20240404-en
Behavioral task
behavioral10
Sample
Release/Temp/Resources/PreZen.bin
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
Release/Temp/Resources/Self_sanity.txt
Resource
win10-20240404-en
Behavioral task
behavioral12
Sample
Release/Temp/Resources/ZenConekt.dll
Resource
win10-20240404-en
Behavioral task
behavioral13
Sample
Release/UseSafeLoader.exe
Resource
win10-20240404-en
General
-
Target
Release/Credits.txt
-
Size
57B
-
MD5
3b8587434bfe053ef3326b01fcaba3b2
-
SHA1
8516503df999b37296c542749edc6b0e48353b0d
-
SHA256
fe2fa72290e2318c8ea4602788262435f7156e55077e4e6decf80185124ea260
-
SHA512
df6446d4f5879acf829adb1d3fb00cb5aad515e4fc9f02d5a3ea83cc5fbed932399274a3be55d94c58848bf97dbaefb3211e89a50c4b82f49b2c013546f194e8
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2332 NOTEPAD.EXE