d7dafb1954e6216b222a0a74a7b8f3d9ab12a4101699a93df8cdf8e7dfc348cb | Triage™

Analysis

max time kernel
1556s
max time network
1557s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02/03/2024, 14:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SP/SteamConfig.ini
Size 134B
Sample240302-ryqqlsee76
SHA256 fdc30c33e21145b1234964ff7f8c8186b4c3afe7afd496aaeb9ef520ad3041a9
MD5 dba39f8d59720ec26a5520e15933908e
SHA1 b5021df42613dcac92009626c6857ddfb0c9387d
SHA512 bc127b984245eae3f552a46f16fdef472e0082550604b0f901456becb8c931ee7368d1435c2c54b01feb7e7dcf38a3b2877ae5f47ac6f44ca7a6f9ef70a42735
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2860	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\SP\SteamConfig.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads