bb943a4b69a11e38ae79651edb071f57da2c9989d6b840eae5efcd4e722d774d | Triage

Analysis

max time kernel
1551s
max time network
1588s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
26-03-2023 13:15

Sharing

Report Analysis Logs

General

Target

Spotify/Block/config.ini
Size

109B
MD5

c0e89e7f4e4c3ac6cff13e042b06c5a8
SHA1

5380f631ab457a0e81bab1d0723147aed8dd9f07
SHA256

02af7cc426010c43f106b5a4e76652238b5e5edcc8fd7bb11fa67b322e5b306d
SHA512

4a11b3ba9796108754c738bbb538dfa95b0b1ccd3a4767cffcaa42e371bc95e6a5d57594fa38e80e14447f3e2fa203dcf014c8ad36b98b109f61cb73dc98345e

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1504 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Spotify\Block\config.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...