d49874f5353ce132ee0b52eaf13b2ccd4feb74b215c776f8b28c7ceaaeb784fa | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-02-2024 11:54

Sharing

Report Analysis Logs

General

Target

at.txt
Size

4.2MB
MD5

9852d17e659ca63290d41fd3b484738a
SHA1

ef57385d83b05d8e8c999fb909dc2dcdaa5d1905
SHA256

0c0a31ac7ee6558812b604822139b9f23fec59e9fd26f00003bfe62c36090c15
SHA512

664d0af7c84f9c18fa3d0cffa4e24f9ba9898c071a235da39acea28c0335c44bb8ba3dd7999a05f7ca74c8354832546941c3d6106b7320ba021768be8b36bdcb
SSDEEP

98304:wDTCAs6c+wLBgxB51i7vUUfyLR5eG7lijXHFMrPVPyh0MJdHB1xx:Kls6aLB247s2yLRQGgj327VPu1Pr

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1716 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\at.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1716

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...