a7170fb544444a648b318456146e9866fdb4fd92d25a88da154671ab72b8c273 | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23/02/2024, 07:47

Sharing

Report Analysis Logs

General

Target

usbwebserver/php/php.ini
Size

71KB
MD5

44e04e7a93e31dd44251b01f09e11842
SHA1

426ffce3aa89a1ad1126ca97ae6819960d5f91b7
SHA256

5e196f6956ea5496c6b998281a5380487fe59460643efb1400c84ff62e3ca479
SHA512

73af7191ac1bdb41d8e532b3d7495acb00a4a39911e18b39b9f6f6dfd3842bbf1134efff06f43d55d3732640f447d1dd5f3d576709ca929a07881d963c815cb8
SSDEEP

1536:I5+iKcGNQGrNRVD4ktxYGwJ0wXSW+eahRD:IEiKp/NR5JxYGgbahRD

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1968	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\usbwebserver\php\php.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads