Overview
overview
3Static
static
3Nighty2.2.zip
windows7-x64
1Nighty2.2.zip
windows10-2004-x64
1selfbot/ce...rt.pem
windows7-x64
3selfbot/ce...rt.pem
windows10-2004-x64
3selfbot/config.json
windows7-x64
3selfbot/config.json
windows10-2004-x64
3selfbot/da...g.json
windows7-x64
3selfbot/da...g.json
windows10-2004-x64
3selfbot/da...ae.txt
windows7-x64
1selfbot/da...ae.txt
windows10-2004-x64
1selfbot/da...m.json
windows7-x64
3selfbot/da...m.json
windows10-2004-x64
3selfbot/da...p.json
windows7-x64
3selfbot/da...p.json
windows10-2004-x64
3selfbot/da...le.txt
windows7-x64
1selfbot/da...le.txt
windows10-2004-x64
1selfbot/da...t.json
windows7-x64
3selfbot/da...t.json
windows10-2004-x64
3selfbot/da...s.json
windows7-x64
3selfbot/da...s.json
windows10-2004-x64
3selfbot/da...r.json
windows7-x64
3selfbot/da...r.json
windows10-2004-x64
3selfbot/da...l.json
windows7-x64
3selfbot/da...l.json
windows10-2004-x64
3selfbot/da...ty.png
windows7-x64
3selfbot/da...ty.png
windows10-2004-x64
3selfbot/da...h.json
windows7-x64
3selfbot/da...h.json
windows10-2004-x64
3selfbot/da...e.json
windows7-x64
3selfbot/da...e.json
windows10-2004-x64
3selfbot/da...t.json
windows7-x64
3selfbot/da...t.json
windows10-2004-x64
3Analysis
-
max time kernel
145s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28-06-2024 05:32
Static task
static1
Behavioral task
behavioral1
Sample
Nighty2.2.zip
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Nighty2.2.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
selfbot/certifi/cacert.pem
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
selfbot/certifi/cacert.pem
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
selfbot/config.json
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
selfbot/config.json
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
selfbot/data/abuseconfig.json
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
selfbot/data/abuseconfig.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
selfbot/data/animated/dewae.txt
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
selfbot/data/animated/dewae.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
selfbot/data/automod/userspam.json
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
selfbot/data/automod/userspam.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
selfbot/data/backups/dailybackup.json
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
selfbot/data/backups/dailybackup.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
selfbot/data/customstatus/example.txt
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
selfbot/data/customstatus/example.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
selfbot/data/eventreact.json
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
selfbot/data/eventreact.json
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
selfbot/data/favorites.json
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
selfbot/data/favorites.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
selfbot/data/giveawayjoiner.json
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
selfbot/data/giveawayjoiner.json
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
selfbot/data/gmail.json
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
selfbot/data/gmail.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
selfbot/data/images/nighty.png
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
selfbot/data/images/nighty.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
selfbot/data/languages/english/english.json
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
selfbot/data/languages/english/english.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
selfbot/data/misc/about_me.json
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
selfbot/data/misc/about_me.json
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
selfbot/data/misc/auto_suggest.json
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
selfbot/data/misc/auto_suggest.json
Resource
win10v2004-20240508-en
General
-
Target
selfbot/data/customstatus/example.txt
-
Size
91B
-
MD5
ce0a462006b54784aa046491d5b6ef57
-
SHA1
69b0d7e8e5934151ffed34a186767ff634cdd187
-
SHA256
ea75c32e7a595d04d17a413f21e2b349fafda4ceb204cc825f51de77da4aaff0
-
SHA512
92937428964e2634a96724922203bf3eed8de53c9cdce42886b42c1eb51382e0c2a6da1a1bea5bf0c1dcb5d85da46e160546917c28b4cdd540a33bd204d7af54
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1660 NOTEPAD.EXE