Overview
overview
10Static
static
10Mapper/map.exe
windows7-x64
Mapper/map.exe
windows10-2004-x64
Mapper/mat...er.sys
windows7-x64
3Mapper/mat...er.sys
windows10-2004-x64
3README.txt
windows7-x64
1README.txt
windows10-2004-x64
1loader.exe
windows7-x64
7loader.exe
windows10-2004-x64
8HL���i7.pyc
windows7-x64
HL���i7.pyc
windows10-2004-x64
Analysis
-
max time kernel
95s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
03-01-2025 01:17
Behavioral task
behavioral1
Sample
Mapper/map.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Mapper/map.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Mapper/matcha-driver.sys
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Mapper/matcha-driver.sys
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
README.txt
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
README.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
loader.exe
Resource
win7-20241023-en
Behavioral task
behavioral8
Sample
loader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
HL���i7.pyc
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
HL���i7.pyc
Resource
win10v2004-20241007-en
General
-
Target
README.txt
-
Size
430B
-
MD5
a521ef1bd549901fe5687f4ef76e7192
-
SHA1
c1bdc35b52fdfaa4def5823337d180781270dfb1
-
SHA256
e2f674f66b58f3a5ff78d8da6fbb64c70625f81fd82ff1015803e5dfd0bee6a0
-
SHA512
d6c93c13bd26fd8515170e147dcf2350f542b1494f24c5f4e5c1848f608f0af7299b718f93a8307585a57818f6453427ceea228e7167d1904221488a6e3da349
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1748 NOTEPAD.EXE