Overview
overview
10Static
static
1api-ms-win...-0.dll
windows10-2004-x64
1api-ms-win...-0.dll
windows10-2004-x64
1api-ms-win...-0.dll
windows10-2004-x64
1mib.bin
windows7-x64
3mib.bin
windows10-2004-x64
3setup.exe
windows7-x64
1setup.exe
windows10-2004-x64
10setupact.log
windows7-x64
1setupact.log
windows10-2004-x64
1system.ini
windows7-x64
1system.ini
windows10-2004-x64
1Analysis
-
max time kernel
141s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
27/07/2024, 12:43
Static task
static1
Behavioral task
behavioral1
Sample
api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
mib.bin
Resource
win7-20240708-en
Behavioral task
behavioral5
Sample
mib.bin
Resource
win10v2004-20240709-en
Behavioral task
behavioral6
Sample
setup.exe
Resource
win7-20240704-en
Behavioral task
behavioral7
Sample
setup.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral8
Sample
setupact.log
Resource
win7-20240705-en
Behavioral task
behavioral9
Sample
setupact.log
Resource
win10v2004-20240704-en
Behavioral task
behavioral10
Sample
system.ini
Resource
win7-20240704-en
Behavioral task
behavioral11
Sample
system.ini
Resource
win10v2004-20240709-en
General
-
Target
setupact.log
-
Size
2KB
-
MD5
4c39556ae445b09a7c2a6f5e4b486fc5
-
SHA1
18f728d8667327f446949b801ddc40f9ce3bc2f5
-
SHA256
7558f2aac7807f786c3db87e9447a9529bdd3ecd5f4af2de9595effdc23d85f2
-
SHA512
1a9692a52ae41285a9902b293cefb20d3f475a1f493dc0ecdabbde390560e67a8d6ca00751ded3b99b265f8a4be311b165a299e69b2f6b73b6a95b00f11e17b4
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2928 NOTEPAD.EXE