5ec214ec9d1e2792eb71199f0e48a103cb721986348f7f1b6055eda38ff2d625

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
16-02-2024 20:12

Target

at.txt
Size

4.2MB
MD5

24ba096c636806c124de8ba01617d9de
SHA1

1bd131039b9cd52a5f88da0b41ac029492367e99
SHA256

7e7d1a71be1d0fbe1104adf70811739e577a6d8006aaadca760b7782d7995159
SHA512

2b3b012d0edd541b8f0b87efd3ec878f6d5e43c8a0d997c7e0963f4660e0c4729116b96c90cd674c89217f6ebb63d8bae579caa02293e96091302d50467af315
SSDEEP

49152:kZEThgHqB20dUMq4lu1xdLRDnFUmvRaF36M6qgI7ynsQthUTtwwHRFMbKF/8x9QC:sEThAkldU5DRD/vS36H/ZdthL0HGzSYB

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1936 NOTEPAD.EXE

pid	process
1936	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\at.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1936