Overview
overview
10Static
static
1!@Set-𝓤...##.zip
windows7-x64
1!@Set-𝓤...##.zip
windows10-2004-x64
1#Set-Up--6...e#!.7z
windows7-x64
1#Set-Up--6...e#!.7z
windows10-2004-x64
1Satup_32--...up.exe
windows7-x64
10Satup_32--...up.exe
windows10-2004-x64
10Pa$$__ 6649.jpg
windows7-x64
1Pa$$__ 6649.jpg
windows10-2004-x64
4Read.me.txt
windows7-x64
1Read.me.txt
windows10-2004-x64
1Resubmissions
29/01/2025, 16:46
250129-t95p1sskfl 1029/01/2025, 16:44
250129-t8xb9atjaw 329/01/2025, 15:43
250129-s5zsjazrgm 10Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29/01/2025, 15:43
Static task
static1
Behavioral task
behavioral1
Sample
!@Set-𝓤p__6649--!P𝕒$$w0ɾ𝓓##.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
!@Set-𝓤p__6649--!P𝕒$$w0ɾ𝓓##.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
#Set-Up--6649__Pα$$C0Ḏe#!.7z
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
#Set-Up--6649__Pα$$C0Ḏe#!.7z
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Satup_32--64Bit/setup.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Satup_32--64Bit/setup.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Pa$$__ 6649.jpg
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Pa$$__ 6649.jpg
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Read.me.txt
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Read.me.txt
Resource
win10v2004-20241007-en
General
-
Target
Read.me.txt
-
Size
1023.0MB
-
MD5
f370b3064ad9961e88c468fe23695256
-
SHA1
39248d6e0ca4b07c00431e6a043525e0e82f1769
-
SHA256
a4b21a6919b1b2a237a145816edbef19cb7bb3ced1fe27e5a069fc252e6c79dd
-
SHA512
b0f5c294503d2d86220411d0fc6cf0f4683a10e9f7840bd7d29cc3247dde2b5ef89d745967db613443344927e56dee843e62e67441b576bb2bfe2add7ca3fd23
-
SSDEEP
96:q22222222222222222222222222222222222222222222222222222222222222E:9
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 848 NOTEPAD.EXE