Overview
overview
10Static
static
1IPTVPlayer...PN.rar
windows7-x64
1IPTVPlayer...PN.rar
windows10-2004-x64
1Description.txt
windows7-x64
1Description.txt
windows10-2004-x64
1Setup.rar
windows7-x64
1Setup.rar
windows10-2004-x64
1Setup/Clie...NU.txt
windows7-x64
1Setup/Clie...NU.txt
windows10-2004-x64
1Setup/DAC/...rk.txt
windows7-x64
1Setup/DAC/...rk.txt
windows10-2004-x64
1Setup/DAC/...Fx.txt
windows7-x64
1Setup/DAC/...Fx.txt
windows10-2004-x64
1Setup/Lice...NU.txt
windows7-x64
1Setup/Lice...NU.txt
windows10-2004-x64
1Setup/Setu...ll.bat
windows7-x64
10Setup/Setu...ll.bat
windows10-2004-x64
10Analysis
- max time kernel
96s - max time network
99s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
22/01/2025, 00:59
Static task
static1
Behavioral task
behavioral1
Sample
IPTVPlayerTOP+AtlasVPN.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
IPTVPlayerTOP+AtlasVPN.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Description.txt
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Description.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Setup.rar
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Setup.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Setup/Client SDK/ODBC/170/License Terms/License_msodbcsql_ENU.txt
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Setup/Client SDK/ODBC/170/License Terms/License_msodbcsql_ENU.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Setup/DAC/bin/Redist_DACFramework.txt
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Setup/DAC/bin/Redist_DACFramework.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Setup/DAC/bin/en/License_DACFx.txt
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Setup/DAC/bin/en/License_DACFx.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Setup/License Terms/License_SQLNCLI_ENU.txt
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
Setup/License Terms/License_SQLNCLI_ENU.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Setup/Setup-install.bat
Resource
win7-20240903-en
General
- Target Setup/DAC/bin/en/License_DACFx.txt
- Size 13KB
- Sample250122-bb5m9azrem
- SHA256 fba02491e20b9de7ed50476145904f4a130aa2ad6de15c4e55b63368263f6fe8
- MD5 5331bac43e1da20a9cf5b9bd4ee4f83a
- SHA1 83f5cd92320abc367e4215f98c78ecaedec5f56b
- SHA512 0806679ecb8c5ea459092cbf7d5b030ed41eb596399f95770f5b4e95b3a70f46b8099c29cbfab292398b0bc03e76b0ad049a29ecb49b7aff81bca84dede4d2a8
- SSDEEP 192:MXeJZVu+P8Fg3AMehbVPoIszXgIBtClbZkk8Z8Sfgn82Cb3:8eJrlahxoIi1BtCnkzBfxb3
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4528 NOTEPAD.EXE