Overview
overview
10Static
static
39b00715d77...4e.zip
windows10-1703-x64
19b00715d77...4e.exe
windows10-1703-x64
10$PLUGINSDI...em.dll
windows10-1703-x64
3Bagpaa.mon
windows10-1703-x64
3Condign.str
windows10-1703-x64
3alsmekill.sta
windows10-1703-x64
3boat.ast
windows10-1703-x64
3rupis.txt
windows10-1703-x64
1Analysis
-
max time kernel
135s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
08-10-2024 19:47
Static task
static1
Behavioral task
behavioral1
Sample
9b00715d77438200a4f54fa8f47ac17aab0cc166e95fc6737c2a78021b69a64e.zip
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
9b00715d77438200a4f54fa8f47ac17aab0cc166e95fc6737c2a78021b69a64e.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Bagpaa.mon
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
Condign.str
Resource
win10-20240611-en
Behavioral task
behavioral6
Sample
alsmekill.sta
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
boat.ast
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
rupis.txt
Resource
win10-20240404-en
General
-
Target
rupis.txt
-
Size
276B
-
MD5
668a01d3af55a42fbfdbb1e9dd730b59
-
SHA1
e0949d489a15516b3cd09f1043543c38e3688f1a
-
SHA256
6a7feebfe1f4330e611e6e1b3804619d329a9d3abd3a3ecbd9d441f884e9999d
-
SHA512
cf3f03583667362adcea4deb094513b84d3e275ebcc42a993f9293b7374618a1ba060d4c4bae446c02b329dde2a4579c152f54a1f7537a0f83a3e88406509459
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1104 NOTEPAD.EXE