2f8c3bbf9c8966c872abce77fa46375d20037fd5814d6e1dae1d94e13a933cb9

Resubmissions

06/06/2023, 07:07

06/06/2023, 06:51

max time kernel
43s
max time network
47s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
06/06/2023, 07:07

Target

HouseFlipper.exe
Size

635KB
MD5

ed0a4f3da0e3c834fd471716bf7fa42b
SHA1

896e56bda297db2bc576a1f2f8324532c2ed38a1
SHA256

2f8c3bbf9c8966c872abce77fa46375d20037fd5814d6e1dae1d94e13a933cb9
SHA512

b763277b828567abeca41f46bda7d591c19b133bbcf435774f373677ba8f0c4a3542665adba3b847a76335e9895a7ed08e0eb22261059303ac4604a63e0c7597
SSDEEP

12288:xLkNyeHJP//Q51ppjK4oaQ63ZKH+xlE158gPdWsIuyPf1h1aYXOlyvDjkmu7cfI:9VKJP/WzpG4oaRZBg15ZdWsIuyPf10yk

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5080	NOTEPAD.EXE

C:\Users\Admin\AppData\Local\Temp\HouseFlipper.exe
"C:\Users\Admin\AppData\Local\Temp\HouseFlipper.exe"
1⤵
PID:3280

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2296

C:\Users\Admin\AppData\Local\Temp\HouseFlipper.exe
"C:\Users\Admin\AppData\Local\Temp\HouseFlipper.exe"
1⤵
PID:4476

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\HouseFlipper.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5080