Overview
overview
10Static
static
10matcha-9db...1).rar
windows7-x64
7matcha-9db...1).rar
windows10-2004-x64
1README.txt
windows7-x64
1README.txt
windows10-2004-x64
1imgui.ini
windows7-x64
1imgui.ini
windows10-2004-x64
1loader.exe
windows7-x64
7loader.exe
windows10-2004-x64
8���l��.pyc
windows7-x64
���l��.pyc
windows10-2004-x64
mapper/map.exe
windows7-x64
1mapper/map.exe
windows10-2004-x64
1mapper/mat...er.sys
windows10-2004-x64
1matcha.exe
windows7-x64
7matcha.exe
windows10-2004-x64
8���l��.pyc
windows7-x64
���l��.pyc
windows10-2004-x64
Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29-10-2024 19:17
Behavioral task
behavioral1
Sample
matcha-9dbf9780562444e1-upd2 (1).rar
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
matcha-9dbf9780562444e1-upd2 (1).rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
README.txt
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
README.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
imgui.ini
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
imgui.ini
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
loader.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
loader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
���l��.pyc
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
���l��.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
mapper/map.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
mapper/map.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
mapper/matcha-driver.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral14
Sample
matcha.exe
Resource
win7-20240903-en
Behavioral task
behavioral15
Sample
matcha.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral16
Sample
���l��.pyc
Resource
win7-20240903-en
Behavioral task
behavioral17
Sample
���l��.pyc
Resource
win10v2004-20241007-en
General
-
Target
imgui.ini
-
Size
637B
-
MD5
a9370b37821660086512ad1fe87c5ee2
-
SHA1
1781651d8e4c45070fbd9dc6af807a8e73e96d20
-
SHA256
b07f895343ab0d9e2c15bd4d221103306b2b9a524066ee214fd299ef002902d8
-
SHA512
766e91b16f980188afac7e8a2e787bbf669c1e0034002c347044911d430b299a00435b29250ba80267d7073ac57021ea63bc1aad4bb6b7bade087dcf9739a7fb
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3968 NOTEPAD.EXE