Overview
overview
10Static
static
10Calamari.zip
windows7-x64
1Calamari.zip
windows10-2004-x64
1Calamari/Calamari.exe
windows7-x64
6Calamari/Calamari.exe
windows10-2004-x64
6Calamari/S...ET.dll
windows7-x64
1Calamari/S...ET.dll
windows10-2004-x64
1Calamari/S...PI.dll
windows7-x64
1Calamari/S...PI.dll
windows10-2004-x64
1Calamari/c...16.txt
windows7-x64
1Calamari/c...16.txt
windows10-2004-x64
1Calamari/j...up.mp3
windows7-x64
1Calamari/j...up.mp3
windows10-2004-x64
6Calamari/sxlib.dll
windows7-x64
3Calamari/sxlib.dll
windows10-2004-x64
3Analysis
-
max time kernel
137s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
16-08-2024 18:05
Behavioral task
behavioral1
Sample
Calamari.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Calamari.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Calamari/Calamari.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Calamari/Calamari.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Calamari/ScintillaNET.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Calamari/ScintillaNET.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Calamari/SynapseZAPI.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
Calamari/SynapseZAPI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Calamari/crashlogs/1812_15316.txt
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Calamari/crashlogs/1812_15316.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Calamari/jacked_up.mp3
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Calamari/jacked_up.mp3
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Calamari/sxlib.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Calamari/sxlib.dll
Resource
win10v2004-20240802-en
General
-
Target
Calamari/crashlogs/1812_15316.txt
-
Size
29KB
-
MD5
d7d212e86ea2413bcf0f5d9f7a04dddd
-
SHA1
d5dfdb2364a9b957c9d30fff7b80036e565c8f1b
-
SHA256
da85797ae8f87a198dd0d30e9a2e84af5687390aab063bc0a53b7c7fce17d9ac
-
SHA512
6cf3c15cf69510652239679fc12f46c2c46af36433796593eccca166d6b85408cddb8e614afeda21e52e172c2eba9ae56c5e187f805ae44cd6908061ec084b21
-
SSDEEP
384:jI6yLDHAUjP6yLDHAUjCkw3/uM3N27UEeZMA7DTf4sL:kx1Px1CkwuoXf7ft
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid process 916 NOTEPAD.EXE