Overview

overview

8

Static

static

3

0day_Cheat_Engine.rar

windows10-2004-x64

8

commonmodulelist.txt

windows10-2004-x64

1

defines.lua

windows10-2004-x64

3

donottrace.txt

windows10-2004-x64

1

driver64.dat

windows10-2004-x64

3

include/_mingw.h

windows10-2004-x64

3

include/assert.h

windows10-2004-x64

3

include/celib.h

windows10-2004-x64

3

include/conio.h

windows10-2004-x64

3

include/ctype.h

windows10-2004-x64

5

include/dir.h

windows10-2004-x64

3

include/direct.h

windows10-2004-x64

3

include/dirent.h

windows10-2004-x64

3

languages/...64.pot

windows10-2004-x64

1

mrgg.sys

windows10-2004-x64

1

mytes0day0-x86_64.exe

windows10-2004-x64

6

mytes0day0-x86_64.exe

windows10-2004-x64

6

packfiles.bat

windows10-2004-x64

1

standalonephase1.exe

windows10-2004-x64

3

test1-x86_64.exe

windows10-2004-x64

tiny.exe

windows10-2004-x64

3

vmdisk.vbs

windows10-2004-x64

1

win32/dbghelp.dll

windows10-2004-x64

3

win32/sqlite3.dll

windows10-2004-x64

3

win32/symsrv.dll

windows10-2004-x64

3

win32/symsrv.yes

windows10-2004-x64

3

win64/dbghelp.dll

windows10-2004-x64

1

win64/old/dbghelp.dll

windows10-2004-x64

1

win64/old/symsrv.dll

windows10-2004-x64

1

win64/sqlite3.dll

windows10-2004-x64

1

win64/symsrv.dll

windows10-2004-x64

1

win64/symsrv.yes

windows10-2004-x64

3

Analysis

  • max time kernel
    1307s
  • max time network
    1141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-08-2024 16:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    commonmodulelist.txt

  • Size

    1KB

  • MD5

    cc0f8b66bfedc67da8dbb2a7df2aa006

  • SHA1

    c6d86cc43a042581e389dc9a28affddf64294ac8

  • SHA256

    cddd0f35f7351e6f19486ccd7eee5d31f0134c5c3554a12c7d51131dde8e29cd

  • SHA512

    a4aec40ac6bea2adacf15829aeeebe66117473a542303024669a828710c6afd072c0f4890a6a334b35ac894a1a80a5bdd5e91a6ffcb7149540e304117a7e5800

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\commonmodulelist.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:3920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads