Overview
overview
10Static
static
3=XUTF-8XQX...=9.zip
windows7-x64
1=XUTF-8XQX...=9.zip
windows10-2004-x64
1SÖZLEŞME...df.exe
windows7-x64
10SÖZLEŞME...df.exe
windows10-2004-x64
10$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Baadehavnes.ugo
windows7-x64
3Baadehavnes.ugo
windows10-2004-x64
3Martyrizations.sim
windows7-x64
3Martyrizations.sim
windows10-2004-x64
3Opsamlings...19.bes
windows7-x64
3Opsamlings...19.bes
windows10-2004-x64
3ammunition...en.txt
windows7-x64
1ammunition...en.txt
windows10-2004-x64
1teleph.all
windows7-x64
3teleph.all
windows10-2004-x64
3Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
03-10-2024 13:41
Static task
static1
Behavioral task
behavioral1
Sample
=XUTF-8XQXS=C3=96ZLE=C5=9EME_=C5=9EARTLARI_=28YEN=C4=B0_S=C4=B0PARX=XXX=XUTF-8XQX=C4=B0=C5=9E_S=C3=9.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
=XUTF-8XQXS=C3=96ZLE=C5=9EME_=C5=9EARTLARI_=28YEN=C4=B0_S=C4=B0PARX=XXX=XUTF-8XQX=C4=B0=C5=9E_S=C3=9.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
SÖZLEŞME ŞARTLARI (YENİ SİPARİŞ SÖZLEŞMESİ)-pdf.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
SÖZLEŞME ŞARTLARI (YENİ SİPARİŞ SÖZLEŞMESİ)-pdf.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Baadehavnes.ugo
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Baadehavnes.ugo
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Martyrizations.sim
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Martyrizations.sim
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Opsamlingsbeholdere119.bes
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Opsamlingsbeholdere119.bes
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
ammunitionsfabrikken.txt
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
ammunitionsfabrikken.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
teleph.all
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
teleph.all
Resource
win10v2004-20240802-en
General
-
Target
ammunitionsfabrikken.txt
-
Size
624B
-
MD5
87f4b14cca6f39d1c934f93b13234749
-
SHA1
9fcdd0ead74ee185f49409e0ffe86b1925cc6f77
-
SHA256
e619e25d31210ded72b4dbae631948d4335aeae318148e864421457ef0f4ace9
-
SHA512
13db40313fef1fdeb1d517e0664b7766328dd7dc7244741ff6b6eae62c6d0ba5ee458e058375c466c9cb6062e0d7dcc3ec3f57310604a7372f79839acafe9471
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5072 NOTEPAD.EXE