bff57ccfbe2690d2b35717379b6c6902270dba122a8d508457124c073eaffd0e | Triage

Resubmissions

02-02-2024 14:59

240202-sc227aggd2 7

02-02-2024 14:53

240202-r9dkesahcq 3

Analysis

max time kernel
543s
max time network
587s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
02-02-2024 14:59

Sharing

Report Analysis Logs

General

Target

AUTORUN.inf
Size

35B
MD5

87e8db45724cc57e0442b905b60979f4
SHA1

3bcdd62ce3ed6ce8f4e537ad2919074550e508b2
SHA256

0d881142d06a9062347dcda6a01ba6476df23c9faf55c5a549683689314a5c6e
SHA512

85295ca6755a29f7f592455d17ff65d29b81e617e077d6618263f7a1ebb1f5737b3d313168953c7cbdaf6f1e768a5ed77c5e0bd609d3b01cadf71d76f81bb65c

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

4344 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\AUTORUN.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:4344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...