efa1d58a1ef9552c112af904ac12af15072be2ec620cea1f9edb011f399fa9d3

Analysis

max time kernel
301s
max time network
273s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
23/02/2024, 22:27

Target

MegaHackInstaller/licenses/minhook.txt
Size

4KB
MD5

5620d973e3f8da2318fc18a5cbc098c4
SHA1

6c30d77b67f44704514f77c27fa93175b5370796
SHA256

d5c2224982b0b95a16b098a561335fa93f3eaf4d0aa964b7843edb986df78dc8
SHA512

9db8569e94c43a9933ce6eac503d336f0bd3efab00fb5d36a55b770a35bd3591795c85c715d045ae67b829c39e3995920cbe400f587dad75fbccd7ba7513f65b
SSDEEP

96:EKYrYJ0rYJ7N383d9uQ9nYrYJ0rYJ7N3V3d9ub4ZnYrYJ0rYJ7N3V3d9uP:RYrs0rs7N383buQ9nYrs0rs7N3V3bubL

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3524	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\MegaHackInstaller\licenses\minhook.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3524