Overview
overview
10Static
static
10IDA Pro 8....64).7z
windows7-x64
3IDA Pro 8....64).7z
windows10-2004-x64
3IDA/til/pp...dk.til
windows7-x64
3IDA/til/pp...dk.til
windows10-2004-x64
3IDA/til/sp...rc.til
windows7-x64
3IDA/til/sp...rc.til
windows10-2004-x64
3IDA/til/xn...64.til
windows7-x64
3IDA/til/xn...64.til
windows10-2004-x64
3IDA/til/xn...86.til
windows7-x64
3IDA/til/xn...86.til
windows10-2004-x64
3IDA/til/xn...64.til
windows7-x64
3IDA/til/xn...64.til
windows10-2004-x64
3IDA/til/xn...64.til
windows7-x64
3IDA/til/xn...64.til
windows10-2004-x64
3cracked/ida.key
windows7-x64
3cracked/ida.key
windows10-2004-x64
3cracked/idacfg.ini
windows7-x64
1cracked/idacfg.ini
windows10-2004-x64
1cracked/secur32.dll
windows7-x64
1cracked/secur32.dll
windows10-2004-x64
1cracked/sr...ll.sln
windows7-x64
3cracked/sr...ll.sln
windows10-2004-x64
3cracked/sr...ydll.c
windows7-x64
3cracked/sr...ydll.c
windows10-2004-x64
3cracked/sr...ydll.h
windows7-x64
3cracked/sr...ydll.h
windows10-2004-x64
3cracked/sr...dll.rc
windows7-x64
3cracked/sr...dll.rc
windows10-2004-x64
3cracked/sr...cxproj
windows7-x64
3cracked/sr...cxproj
windows10-2004-x64
3cracked/sr...ilters
windows7-x64
3cracked/sr...ilters
windows10-2004-x64
3Analysis
- max time kernel
82s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
02/08/2024, 22:24
Behavioral task
behavioral1
Sample
IDA Pro 8.3.230608 (Windows) (x86,x64).7z
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral2
Sample
IDA Pro 8.3.230608 (Windows) (x86,x64).7z
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
IDA/til/ppc/ppceldk.til
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral4
Sample
IDA/til/ppc/ppceldk.til
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
IDA/til/sparc/sparc.til
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral6
Sample
IDA/til/sparc/sparc.til
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
IDA/til/xnu_4903_x64.til
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral8
Sample
IDA/til/xnu_4903_x64.til
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
IDA/til/xnu_4903_x86.til
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral10
Sample
IDA/til/xnu_4903_x86.til
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
IDA/til/xnu_6153_x64.til
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral12
Sample
IDA/til/xnu_6153_x64.til
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
IDA/til/xnu_7195_x64.til
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral14
Sample
IDA/til/xnu_7195_x64.til
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
cracked/ida.key
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral16
Sample
cracked/ida.key
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
cracked/idacfg.ini
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral18
Sample
cracked/idacfg.ini
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
cracked/secur32.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral20
Sample
cracked/secur32.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
cracked/src/idaproxydll.sln
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral22
Sample
cracked/src/idaproxydll.sln
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
cracked/src/idaproxydll/idaproxydll.c
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral24
Sample
cracked/src/idaproxydll/idaproxydll.c
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
cracked/src/idaproxydll/idaproxydll.h
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral26
Sample
cracked/src/idaproxydll/idaproxydll.h
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
cracked/src/idaproxydll/idaproxydll.rc
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral28
Sample
cracked/src/idaproxydll/idaproxydll.rc
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
cracked/src/idaproxydll/idaproxydll.vcxproj
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral30
Sample
cracked/src/idaproxydll/idaproxydll.vcxproj
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
cracked/src/idaproxydll/idaproxydll.vcxproj.filters
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral32
Sample
cracked/src/idaproxydll/idaproxydll.vcxproj.filters
Resource
win10v2004-20240802-en
windows10-2004-x64
General
- Target cracked/idacfg.ini
- Size 1KB
- Sample240802-2be1psshlk
- SHA256 af0b6489255ed81adf89d2ca2b5c6ced767d5023ab0dd32d97bf7e462d04e89e
- MD5 0c2fa0524a19dd4f624461331d0840ad
- SHA1 88ed57a3bb18092543da4e5b68a0b18cb18632ca
- SHA512 0fbaea1566ed389b3b5b70bf988a85704b2656fc770f4b042a6a11bd1ec1c657c6a62fff13d1aa63ad9ba2edf0e89eacc544c239dcb4b5ca2fd8b14ef2f41192
- MD5 SHA1 SHA512
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4192 NOTEPAD.EXE