d49874f5353ce132ee0b52eaf13b2ccd4feb74b215c776f8b28c7ceaaeb784fa

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
23-02-2024 11:54

Target

b.txt
Size

23KB
MD5

016c8af0b711d23636f778502db19219
SHA1

d9aadd5f63aa00692ea2fe0b22961ff60279be60
SHA256

dcde9eb9edbbc86d0d658d74eb60f1595a262093bee0e66943ff652e158f28e6
SHA512

de8dbcd8a9fb5befe6d852f955c870468659e81b85afd61f257880edf47d737bc6f7dd9a5c514012a6c62c766019f3e685ee3dfaaea07c992d9348f5eca29c27
SSDEEP

384:Mj0/cBozUqKi8DsHqjFnKNSTYY0Rez/5QLkWN6vXiAq+7UYaiaeOaIfxVh+bJ/jC:T/vUqKFsKw0h1QL7Qvy8UYP6aIfxVgbg

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

3536 NOTEPAD.EXE

pid	process
3536	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\b.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3536