Overview
overview
10Static
static
1IPTVPlayer...PN.rar
windows7-x64
1IPTVPlayer...PN.rar
windows10-2004-x64
1Description.txt
windows7-x64
1Description.txt
windows10-2004-x64
1Setup.rar
windows7-x64
1Setup.rar
windows10-2004-x64
1Setup/Clie...NU.txt
windows7-x64
1Setup/Clie...NU.txt
windows10-2004-x64
1Setup/DAC/...rk.txt
windows7-x64
1Setup/DAC/...rk.txt
windows10-2004-x64
1Setup/DAC/...Fx.txt
windows7-x64
1Setup/DAC/...Fx.txt
windows10-2004-x64
1Setup/Lice...NU.txt
windows7-x64
1Setup/Lice...NU.txt
windows10-2004-x64
1Setup/Setu...ll.bat
windows7-x64
10Setup/Setu...ll.bat
windows10-2004-x64
10Analysis
- max time kernel
63s - max time network
69s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
22/01/2025, 00:59
Static task
static1
Behavioral task
behavioral1
Sample
IPTVPlayerTOP+AtlasVPN.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
IPTVPlayerTOP+AtlasVPN.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Description.txt
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Description.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Setup.rar
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
Setup.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Setup/Client SDK/ODBC/170/License Terms/License_msodbcsql_ENU.txt
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Setup/Client SDK/ODBC/170/License Terms/License_msodbcsql_ENU.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Setup/DAC/bin/Redist_DACFramework.txt
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Setup/DAC/bin/Redist_DACFramework.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Setup/DAC/bin/en/License_DACFx.txt
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Setup/DAC/bin/en/License_DACFx.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Setup/License Terms/License_SQLNCLI_ENU.txt
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
Setup/License Terms/License_SQLNCLI_ENU.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Setup/Setup-install.bat
Resource
win7-20240903-en
General
- Target Description.txt
- Size 6KB
- Sample250122-bb5m9azrem
- SHA256 43b5073b0a2e6dc9c22f2ea7c85e41bf2a538ff3ee0a59cfdf363f56856528eb
- MD5 8e69aceca489d24d721dafd39b77df40
- SHA1 6f1d312de700f3473910dfb0cf7d9df81daa0ff8
- SHA512 3dad6d2f66feb4fda599e443503046d3e9339033d9f86383764763b737e76b9c0e1cd8e55eae1f5fecf24230b35781905c12464c57196285b03fa9d222f5ec6a
- SSDEEP 48:xOoMMMMMMMMMMM2MMMMMMMMMMrO1ibGgFp3QQBnn6G6VEUHvuGlO7igWWPIqOr4a:0/123n63VhGkG52n
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1520 NOTEPAD.EXE