Resubmissions
04-12-2024 04:28
241204-e3ta3sxlep 104-12-2024 03:02
241204-djgmhatpdm 104-12-2024 02:46
241204-c9ep6axpg1 10Analysis
-
max time kernel
61s -
max time network
64s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
04-12-2024 04:28
Static task
static1
Behavioral task
behavioral1
Sample
NSM.ini
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral2
Sample
cAlient32.ini
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral3
Sample
nskbfltr.inf
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral4
Sample
nsm_vpro.ini
Resource
win10ltsc2021-20241023-en
General
-
Target
nsm_vpro.ini
-
Size
46B
-
MD5
3be27483fdcdbf9ebae93234785235e3
-
SHA1
360b61fe19cdc1afb2b34d8c25d8b88a4c843a82
-
SHA256
4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b
-
SHA512
edbe8cf1cbc5fed80fedf963ade44e08052b19c064e8bca66fa0fe1b332141fbe175b8b727f8f56978d1584baaf27d331947c0b3593aaff5632756199dc470e5
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2640 NOTEPAD.EXE