5ec214ec9d1e2792eb71199f0e48a103cb721986348f7f1b6055eda38ff2d625

Analysis

max time kernel
93s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
16-02-2024 20:12

Target

at.txt
Size

4.2MB
MD5

24ba096c636806c124de8ba01617d9de
SHA1

1bd131039b9cd52a5f88da0b41ac029492367e99
SHA256

7e7d1a71be1d0fbe1104adf70811739e577a6d8006aaadca760b7782d7995159
SHA512

2b3b012d0edd541b8f0b87efd3ec878f6d5e43c8a0d997c7e0963f4660e0c4729116b96c90cd674c89217f6ebb63d8bae579caa02293e96091302d50467af315
SSDEEP

49152:kZEThgHqB20dUMq4lu1xdLRDnFUmvRaF36M6qgI7ynsQthUTtwwHRFMbKF/8x9QC:sEThAkldU5DRD/vS36H/ZdthL0HGzSYB

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

3868 NOTEPAD.EXE

pid	process
3868	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\at.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3868