a112416ecdbdfe5c353a367772c2607767b5edf279980f4eaa0a8dc7c9f805b3 | Triage

Analysis

max time kernel
229s
max time network
310s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-03-2024 22:17

Sharing

Report Analysis Logs

General

Target

foi.txt
Size

285B
MD5

b30b573315f4594640e6f5f2817212a9
SHA1

07d6ba335b937d3257f4a1d63240b2980ec87f1b
SHA256

8720c22ed56fe233b759bbe8df16983952649d0ee725511c0d9c41230560f08a
SHA512

b69e41af07b26dad81511128f3aeb0d726a0bf7bc18508eb841e8f08329ec6619821ee4b4ef9c7f22dc2fcb3cbd9f17306dc7cc159f7fa87f27c8ca3c66cf14a

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1700 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\foi.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4136 --field-trial-handle=2692,i,8678872182442199182,12502579059484928042,262144 --variations-seed-version /prefetch:8
1⤵
PID:4360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...