1f3f72219b7fd0a7a240af52841a7beb53cac83004b7f0c9fcdff9fd462252d5 | Triage

Resubmissions

11-02-2024 13:47

240211-q3qqqsag66 7

11-02-2024 13:45

240211-q2vnasag58 7

Analysis

max time kernel
90s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
11-02-2024 13:47

Sharing

Report Analysis Logs

General

Target

qtlogging.ini
Size

509B
MD5

58967a7fcc8cd9d2bdb9b0fc24eed94d
SHA1

b09f4ed1fe53850307cf8cb8cd2767524c26335b
SHA256

ba15aee260e7ca1d48016546bab52fe30c3da264356b629739c125cd4eb3c700
SHA512

5d44670d283b8a88892fd8def2fd2f2f9222d5115b25cc4b9e2b04a7c5f004930dc0b5e2d11ae128ab844f826ba079a0f93e17d5428355bdb4d21a04ee58055a

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

2392 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\qtlogging.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads