5ec214ec9d1e2792eb71199f0e48a103cb721986348f7f1b6055eda38ff2d625

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
16-02-2024 20:12

Target

c.txt
Size

23KB
MD5

da355080181821a57f38db3cdeb22f0f
SHA1

9d5ef757b4b9ce4e01b1584d071cea76f7054c16
SHA256

2e136c3671de5a2da1d50493b3c0e1247193309cc68302c977560b722acab4f0
SHA512

34221a4ef0dec73cce7196fc20a4d3c131fee34d52bdf8ae070ce030884b5303bac05c3e21a342bcbb903f8c3cd7db411b228ac9aa12d6b5413d179810b4692e
SSDEEP

384:MY/cBozUqKi8DsHqjFnKNSTYY0Rez/5QLkWN6vXiAq+7UYaiaeOaIfxVh+bJ/jI4:r/vUqKFsKw0h1QL7Qvy8UYP6aIfxVgbt

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1888 NOTEPAD.EXE

pid	process
1888	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\c.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1888