Overview
overview
10Static
static
10matcha-9db...1).rar
windows7-x64
7matcha-9db...1).rar
windows10-2004-x64
1README.txt
windows7-x64
1README.txt
windows10-2004-x64
1imgui.ini
windows7-x64
1imgui.ini
windows10-2004-x64
1loader.exe
windows7-x64
7loader.exe
windows10-2004-x64
8���l��.pyc
windows7-x64
���l��.pyc
windows10-2004-x64
mapper/map.exe
windows7-x64
1mapper/map.exe
windows10-2004-x64
1mapper/mat...er.sys
windows10-2004-x64
1matcha.exe
windows7-x64
7matcha.exe
windows10-2004-x64
8���l��.pyc
windows7-x64
���l��.pyc
windows10-2004-x64
Analysis
-
max time kernel
11s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
29-10-2024 19:17
Behavioral task
behavioral1
Sample
matcha-9dbf9780562444e1-upd2 (1).rar
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
matcha-9dbf9780562444e1-upd2 (1).rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
README.txt
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
README.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
imgui.ini
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
imgui.ini
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
loader.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
loader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
���l��.pyc
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
���l��.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
mapper/map.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
mapper/map.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
mapper/matcha-driver.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
matcha.exe
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
matcha.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
���l��.pyc
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
���l��.pyc
Resource
win10v2004-20241007-en
General
-
Target
README.txt
-
Size
430B
-
MD5
a521ef1bd549901fe5687f4ef76e7192
-
SHA1
c1bdc35b52fdfaa4def5823337d180781270dfb1
-
SHA256
e2f674f66b58f3a5ff78d8da6fbb64c70625f81fd82ff1015803e5dfd0bee6a0
-
SHA512
d6c93c13bd26fd8515170e147dcf2350f542b1494f24c5f4e5c1848f608f0af7299b718f93a8307585a57818f6453427ceea228e7167d1904221488a6e3da349
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1268 NOTEPAD.EXE