b21f293030df8c3706f999d014d0e31c7673e07dd45e813e23ce80c606bd74cc

Resubmissions

14/02/2024, 03:14

13/02/2024, 22:25

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/02/2024, 22:25

Target
auto_load.txt
Size 187KB
Sample240213-2b1bmsbg82
SHA256 cf63912c3b3ccfacd48e8c35fc5fdd401135e6d56978fc0012ce86b0a4a81e0f
MD5 1e6b9406fd84312cb2bbd29293f1a344
SHA1 543a81b1e1934c1cf0232a20869c428727a25454
SHA512 a977e8e98734da9624c92ce2bd2ae3b2f3d3b910a961339aa223a00828536e979b8b6b603ddf7952e2625b1ae26d1e2931aa4c6dfa47de9908b536780d06767f
SSDEEP 3072:q2L5e0kaEmW57RygMEAm73Gut+rA9b6/uh58tR+gbT71BcTEtYZK:p5V05NyREAm73yrAdj8//1OGYZK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2640	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\auto_load.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2640