d49874f5353ce132ee0b52eaf13b2ccd4feb74b215c776f8b28c7ceaaeb784fa

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-02-2024 11:54

Target

c.txt
Size

23KB
MD5

b4a6dcc3b407766f676e879f4eb47080
SHA1

fff8eed504e9a9a4f9d388231211960faf9b6803
SHA256

a26d7a68dbb2d1dae14773dbcbfc4e2f27f8d54ad6d332a0f832c2d944d8b166
SHA512

2ec69977ab8e01f9d066cfe3d3a8aeb3ec639213dbd85e814de6538b788fe0d5c65175de8fb45243c1aa207acb3b8d2b24cd6f66af534e92ff3e928096c993b1
SSDEEP

384:MdT/cBozUqKi8DsHqjFnKNSTYY0Rez/5QLkWN6vXiAq+7UYaiaeOaIfxVh+bJ/jI:KT/vUqKFsKw0h1QL7Qvy8UYP6aIfxVgC

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

3000 NOTEPAD.EXE

pid	process
3000	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\c.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3000