Overview
overview
10Static
static
10Setup_Update.zip
windows7-x64
8Setup_Update.zip
windows10-2004-x64
1Setup_Upda...te.exe
windows7-x64
10Setup_Upda...te.exe
windows10-2004-x64
8Setup_Upda...AL.txt
windows7-x64
1Setup_Upda...AL.txt
windows10-2004-x64
1Setup_Upda...rv.dll
windows10-2004-x64
1Setup_Upda...nk.dll
windows10-2004-x64
7Setup_Update/hmkd.dll
windows10-2004-x64
1Setup_Upda...fg.dll
windows10-2004-x64
1Analysis
-
max time kernel
91s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
02-01-2025 10:20
Behavioral task
behavioral1
Sample
Setup_Update.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Setup_Update.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Setup_Update/SetupUpdate.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Setup_Update/SetupUpdate.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Setup_Update/TUTORIAL.txt
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Setup_Update/TUTORIAL.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Setup_Update/hidserv.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral8
Sample
Setup_Update/hlink.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Setup_Update/hmkd.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral10
Sample
Setup_Update/hnetcfg.dll
Resource
win10v2004-20241007-en
General
-
Target
Setup_Update/TUTORIAL.txt
-
Size
115B
-
MD5
1c2d069bb3074c90a737fed9402ef341
-
SHA1
1e8441c8d9744d0fe41eeacd9ef1fdb2ec9f5abb
-
SHA256
0258e8f9136dd0428efc08b86fbba8515946ec14dab712eb1996cea864f7ad13
-
SHA512
dc69fa210958bf999424fed91cc649c17fcb574522b0b8d3341a282fdd47d7497b7a431b6dcb691ca7a67add6686896b0f592ade00169e0dbb086a57866981c6
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1656 NOTEPAD.EXE