Overview
overview
3Static
static
3Nighty2.2.zip
windows7-x64
1Nighty2.2.zip
windows10-2004-x64
1selfbot/ce...rt.pem
windows7-x64
3selfbot/ce...rt.pem
windows10-2004-x64
3selfbot/config.json
windows7-x64
3selfbot/config.json
windows10-2004-x64
3selfbot/da...g.json
windows7-x64
3selfbot/da...g.json
windows10-2004-x64
3selfbot/da...ae.txt
windows7-x64
1selfbot/da...ae.txt
windows10-2004-x64
1selfbot/da...m.json
windows7-x64
3selfbot/da...m.json
windows10-2004-x64
3selfbot/da...p.json
windows7-x64
3selfbot/da...p.json
windows10-2004-x64
3selfbot/da...le.txt
windows7-x64
1selfbot/da...le.txt
windows10-2004-x64
1selfbot/da...t.json
windows7-x64
3selfbot/da...t.json
windows10-2004-x64
3selfbot/da...s.json
windows7-x64
3selfbot/da...s.json
windows10-2004-x64
3selfbot/da...r.json
windows7-x64
3selfbot/da...r.json
windows10-2004-x64
3selfbot/da...l.json
windows7-x64
3selfbot/da...l.json
windows10-2004-x64
3selfbot/da...ty.png
windows7-x64
3selfbot/da...ty.png
windows10-2004-x64
3selfbot/da...h.json
windows7-x64
3selfbot/da...h.json
windows10-2004-x64
3selfbot/da...e.json
windows7-x64
3selfbot/da...e.json
windows10-2004-x64
3selfbot/da...t.json
windows7-x64
3selfbot/da...t.json
windows10-2004-x64
3Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
28-06-2024 05:32
Static task
static1
Behavioral task
behavioral1
Sample
Nighty2.2.zip
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Nighty2.2.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
selfbot/certifi/cacert.pem
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
selfbot/certifi/cacert.pem
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
selfbot/config.json
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
selfbot/config.json
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
selfbot/data/abuseconfig.json
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
selfbot/data/abuseconfig.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
selfbot/data/animated/dewae.txt
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
selfbot/data/animated/dewae.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
selfbot/data/automod/userspam.json
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
selfbot/data/automod/userspam.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
selfbot/data/backups/dailybackup.json
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
selfbot/data/backups/dailybackup.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
selfbot/data/customstatus/example.txt
Resource
win7-20240220-en
Behavioral task
behavioral16
Sample
selfbot/data/customstatus/example.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
selfbot/data/eventreact.json
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
selfbot/data/eventreact.json
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
selfbot/data/favorites.json
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
selfbot/data/favorites.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
selfbot/data/giveawayjoiner.json
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
selfbot/data/giveawayjoiner.json
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
selfbot/data/gmail.json
Resource
win7-20240419-en
Behavioral task
behavioral24
Sample
selfbot/data/gmail.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
selfbot/data/images/nighty.png
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
selfbot/data/images/nighty.png
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
selfbot/data/languages/english/english.json
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
selfbot/data/languages/english/english.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
selfbot/data/misc/about_me.json
Resource
win7-20240611-en
Behavioral task
behavioral30
Sample
selfbot/data/misc/about_me.json
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
selfbot/data/misc/auto_suggest.json
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
selfbot/data/misc/auto_suggest.json
Resource
win10v2004-20240508-en
General
-
Target
selfbot/data/animated/dewae.txt
-
Size
703B
-
MD5
8af0747ba2fa4213c446afe6af42755c
-
SHA1
a26d4e458d56cdebf71bccf36daf060be38fcc5b
-
SHA256
447fa2eefec4e5a29c2f1c6b7e297f3adf61c56526772bae1add2065ce49cf2e
-
SHA512
1e30b566f1149705967906814f3f1f2bd8802fc9bfa28ec5d058d19b1334ca2322a5319d1f3b60513c9573c6fe6b371a8ba35e8e45d47f83e1bf2ece6668b8e6
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1540 NOTEPAD.EXE