d49874f5353ce132ee0b52eaf13b2ccd4feb74b215c776f8b28c7ceaaeb784fa | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
23-02-2024 11:54

Sharing

Report Analysis Logs

General

Target

foi.txt
Size

283B
MD5

b80d8b710771cd5c27e2ce5a8acdd620
SHA1

be2109469f9addf9423694f6c4c6bba2b08c5201
SHA256

560046208cb11700d7b91ae8061f3f86c6820b26d6e22ee3cd63fa2f37624366
SHA512

7c4f7e65159882fe333d732dd1be5ac53dbbef6952498a50404055cbf3c4cedc6429488a27b049c695a1b280f99a9d578486a862965542b825e5c96da483e392

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1888 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\foi.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1888

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...