5ec214ec9d1e2792eb71199f0e48a103cb721986348f7f1b6055eda38ff2d625 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
16-02-2024 20:12

Sharing

Report Analysis Logs

General

Target

foi.txt
Size

171B
MD5

4ed4f7a919d2eb664871c2e8d48eac90
SHA1

734b011f5d8ebc4c14a7fa55fb360503d9c83364
SHA256

847575708d9a49aa638f2f82c35b183307df879822670bd90a08b22c8068f5e2
SHA512

db1723a69b901f13f39cf4e899b1d6de716f5973cc42685dbdaeb8e918adc034ab8e372a21e3cbb2300f2fc62784f5a2cafc8de6e1c8e5cf738fdb21baff8ab2

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

2236 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\foi.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2236

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...