Overview
overview
10Static
static
3archive_3hc.rar
windows7-x64
3archive_3hc.rar
windows10-2004-x64
3Licenses.txt
windows7-x64
1Licenses.txt
windows10-2004-x64
1amdhip64.dll
windows7-x64
1amdhip64.dll
windows10-2004-x64
1concrt140.dll
windows7-x64
1concrt140.dll
windows10-2004-x64
1msvcp140.dll
windows7-x64
1msvcp140.dll
windows10-2004-x64
7setup.exe
windows7-x64
10setup.exe
windows10-2004-x64
10updates/icudtl.dat
windows7-x64
3updates/icudtl.dat
windows10-2004-x64
3Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
14-06-2024 13:07
Static task
static1
Behavioral task
behavioral1
Sample
archive_3hc.rar
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
archive_3hc.rar
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Licenses.txt
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
Licenses.txt
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
amdhip64.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
amdhip64.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
concrt140.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
concrt140.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
msvcp140.dll
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
msvcp140.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
setup.exe
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
setup.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
updates/icudtl.dat
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
updates/icudtl.dat
Resource
win10v2004-20240508-en
General
-
Target
Licenses.txt
-
Size
131KB
-
MD5
bfe80d65cc4a7f039156a5d7bb258f58
-
SHA1
d4b9c2fb2dba70e5208ee3eb84cdb55a74858fdc
-
SHA256
a8b01bfc0898b04d2027af87d0594bc901cf97766ae1101272463750217ab6d7
-
SHA512
c0bce0daa8932f60db2c13a5b1f1cef329da56eb0e51d8ee617dc12ca0e8b2867f50deefb6ebe6205da3ec947342793f7134a21bad77854fd80b5d1f79fb838c
-
SSDEEP
3072:UcEz0K0y/BT05qyd9AKCTWwgERcXikPpsPOb1SiVoXiBPyPe9KiziRibigJiHRXA:UcEhBydQWwgERcdPpsPOb1Ro4PyPe9zr
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1972 NOTEPAD.EXE