6413b835503a6c77f347a262f0ce18de15ea59608658aa8c2e51a3433ffe1624

Resubmissions

15-01-2023 00:36

15-01-2023 00:11

15-01-2023 00:06

max time kernel
143s
max time network
171s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
15-01-2023 00:06

Target

interium/settings/Legit/legitbot.ini
Size

19KB
MD5

164b15b602fd262be385486b006b4df9
SHA1

7781f6d65f5143ecb94c1e1b162d92800cee6ec5
SHA256

8c03a63272709b55d3a3bb51f44ca1833ecc0542b4c35212228809f73975a955
SHA512

c055e6e0697cc7485fad781128003895d6f7ef6026e4a9ec86a4747ef121273e8cb21452fd744137d4dc5b08a8d42100954f3ea1c4863fdf0ba16c6019643106
SSDEEP

384:eL6LzpdycfOZWHiQwhqcyF7HO2FeaXzX6XbXXXLXEX6XhXSXhfDO4ocAWAaXAUXJ:DLzpdycfOZWHiQwhqcyF7HO2FeaXzX6E

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4192	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\interium\settings\Legit\legitbot.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4192