6413b835503a6c77f347a262f0ce18de15ea59608658aa8c2e51a3433ffe1624

Resubmissions

15-01-2023 00:36

15-01-2023 00:11

15-01-2023 00:06

max time kernel
139s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
15-01-2023 00:06

Target

interium/settings/Golyb0u_SemiLegit/legitbot.ini
Size

20KB
MD5

e5633871b0cfc1b1b9755181b1a19ae7
SHA1

639ca672f299486f9e94fcce2422045f03d099e0
SHA256

f005d7b23940c30beaade96a961af3c2700f75306822a341fd7d20f2e55ef559
SHA512

a93c388dcecb6d08ae8daa6316f1b7b67bd6071bd6e8b5b77e4b22fbe42e5b77d56c6e0fb63874573d50c6d4241fd651f4e3bd94aa9d06f42186fdd6aa7a848d
SSDEEP

384:e2jIZP4IazxkRkIk4NtbDBG6F1jeswGaXzX6XbXXX4XEX6XhXSXyf+iwocudqDs6:VIZPZuxkRkh4NtbDBG6F1jeswGaXzX6j

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5044	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\interium\settings\Golyb0u_SemiLegit\legitbot.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:5044