0ebd6262c1467b03392c988e3af08c67821661040997d442299fc37fd633dbc5

Submit
Reports

Overview

overview

Static

static

angrybirds...st.zip

windows7-x64

angrybirds...st.zip

windows10-2004-x64

angrybirds...or.txt

windows7-x64

angrybirds...or.txt

windows10-2004-x64

angrybirds...er.exe

windows7-x64

angrybirds...er.exe

windows10-2004-x64

angrybirds...er.dll

windows7-x64

angrybirds...er.dll

windows10-2004-x64

angrybirds...ed.txt

windows7-x64

angrybirds...ed.txt

windows10-2004-x64

angrybirds...ig.lua

windows7-x64

angrybirds...ig.lua

windows10-2004-x64

angrybirds...cy.wav

windows7-x64

angrybirds...cy.wav

windows10-2004-x64

angrybirds...cy.wav

windows7-x64

angrybirds...cy.wav

windows10-2004-x64

angrybirds...cy.wav

windows7-x64

angrybirds...cy.wav

windows10-2004-x64

angrybirds...ng.wav

windows7-x64

angrybirds...ng.wav

windows10-2004-x64

angrybirds...01.wav

windows7-x64

angrybirds...01.wav

windows10-2004-x64

angrybirds...02.wav

windows7-x64

angrybirds...02.wav

windows10-2004-x64

angrybirds...03.wav

windows7-x64

angrybirds...03.wav

windows10-2004-x64

angrybirds...04.wav

windows7-x64

angrybirds...04.wav

windows10-2004-x64

angrybirds...05.wav

windows7-x64

angrybirds...05.wav

windows10-2004-x64

angrybirds...06.wav

windows7-x64

angrybirds...06.wav

windows10-2004-x64

Resubmissions

12/09/2024, 20:50

240912-zmmtkstfkj 3

12/09/2024, 20:47

240912-zlcxzsthne 6

Analysis

max time kernel
123s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12/09/2024, 20:47

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

angrybirdsmaker0.4.2.1-dist.zip

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

angrybirdsmaker0.4.2.1-dist.zip

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/About Editor.txt

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral4

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/About Editor.txt

Resource

win10v2004-20240910-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral5

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/AngryBirdsMaker.exe

Resource

win7-20240708-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral6

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/AngryBirdsMaker.exe

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral7

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/AppUpWrapper.dll

Resource

win7-20240708-en

discovery

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral8

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/AppUpWrapper.dll

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral9

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/Discord servers that helped.txt

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/Discord servers that helped.txt

Resource

win10v2004-20240802-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/config.lua

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral12

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/config.lua

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cy.wav

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral14

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cy.wav

Resource

win10v2004-20240910-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral15

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cy.wav

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral16

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cy.wav

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral17

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cy.wav

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral18

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cy.wav

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral19

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/bomb_2009_flying.wav

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral20

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/bomb_2009_flying.wav

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral21

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_01.wav

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral22

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_01.wav

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral23

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_02.wav

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral24

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_02.wav

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral25

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_03.wav

Resource

win7-20240708-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral26

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_03.wav

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral27

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_04.wav

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral28

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_04.wav

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral29

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_05.wav

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral30

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_05.wav

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Behavioral task

behavioral31

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_06.wav

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral32

Sample

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/data_sdk/audio/cypigs/cypig_collision_06.wav

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

8 signatures

150 seconds

Report Analysis Logs

General

Target

angrybirdsmaker0.4.2.1-dist/angrybirdsmaker0.4.2.1-dist/ABM_0.4.2.1_ASDK_.compiled/Discord servers that helped.txt
Size

1KB
MD5

216fe7e98f747e32a2db374bba89223c
SHA1

fca0982d73d9f66609397b1da5df265a24680005
SHA256

74a051df99c8736b4f39aa04ec2f6868819532c4efa1fb2758064bd1b19c38f0
SHA512

3631cfbd7da7d6d269fd8a40370ec0bb562036bab5f5a627dd5bc7a2e9cda4272cf362a6cc4df8ddcd9169853a782e0eacb99b6262c77aadf9853d2f30016381

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
5040	NOTEPAD.EXE

Processes

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\angrybirdsmaker0.4.2.1-dist\angrybirdsmaker0.4.2.1-dist\ABM_0.4.2.1_ASDK_.compiled\Discord servers that helped.txt"
1⤵
- Opens file in notepad (likely ransom note)
PID:5040

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4300,i,2904906934812054273,11716976550456127484,262144 --variations-seed-version --mojo-platform-channel-handle=1420 /prefetch:8
1⤵
PID:6016

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads