Overview
overview
7Static
static
3Nowy Archi...P).zip
windows7-x64
1Nowy Archi...P).zip
windows10-2004-x64
1Bootstrapper.exe
windows7-x64
1Bootstrapper.exe
windows10-2004-x64
7DISCORD
windows7-x64
1DISCORD
windows10-2004-x64
1workspace/IY_FE.iy
windows7-x64
3workspace/IY_FE.iy
windows10-2004-x64
3workspace/...g.json
windows7-x64
3workspace/...g.json
windows10-2004-x64
3workspace/...V4.lua
windows7-x64
3workspace/...V4.lua
windows10-2004-x64
3workspace/...zaphub
windows7-x64
3workspace/...zaphub
windows10-2004-x64
3workspace/flingv2.js
windows7-x64
3workspace/flingv2.js
windows10-2004-x64
3workspace/shaders.js
windows7-x64
3workspace/shaders.js
windows10-2004-x64
3workspace/...99.txt
windows7-x64
1workspace/...99.txt
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
17-08-2024 20:40
Static task
static1
Behavioral task
behavioral1
Sample
Nowy Archiwum WinRARa (ZIP).zip
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Nowy Archiwum WinRARa (ZIP).zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Bootstrapper.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Bootstrapper.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
DISCORD
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
DISCORD
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
workspace/IY_FE.iy
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
workspace/IY_FE.iy
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
workspace/KavoConfig.json
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
workspace/KavoConfig.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
workspace/Speed Hub X V4.lua
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
workspace/Speed Hub X V4.lua
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
workspace/ZapHub/ZapHubFolder.zaphub
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
workspace/ZapHub/ZapHubFolder.zaphub
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
workspace/flingv2.js
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
workspace/flingv2.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
workspace/shaders.js
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
workspace/shaders.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
workspace/walkerps99.txt
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
workspace/walkerps99.txt
Resource
win10v2004-20240802-en
General
-
Target
workspace/walkerps99.txt
-
Size
1KB
-
MD5
bae90e66a08ca9c0e942382a73e7eddb
-
SHA1
995668e7f0e40c7c8e703a3924d5322ad0f652b0
-
SHA256
e33bf4f7ac0bdbace901f28b31b90dbccd36c7fcd7347f183efa2365b5ca0ca5
-
SHA512
1b284ad9187a83cba58c0f76397bb6f9cd9ba136b19f808bb18d4e688a35a1ad80c6d32198efe92d9ce62622d74ca22413bf804903aea0fbb4d383881e69ea9b
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 536 NOTEPAD.EXE