67bb8319e5c9335c925f42015839dce2e47cd688ef4934d61df5bfd5778de9cc

Analysis

max time kernel
118s
max time network
130s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/03/2024, 22:09

Target
at.txt
Size 3.8MB
Sample240314-122fysaf92
SHA256 4928c062020ec178d293597c8cc360d4d4635fed3f478a1dff291eb68cb384ea
MD5 6ec0e533f9b4016bde3a97ad809fcfd4
SHA1 f546970ade0fc670a8e1bda8a649976a7721d963
SHA512 4d26a369ce9a559ecd94c5de8e58526afe6092185a7f53ec9aabef098801a2ef06cbfdc5c672562a89042c77ce513c3fbb1b03f6b6a63a6741e0b7ef7241797c
SSDEEP 98304:5zjXId8OwMttZww22vDu4tTSWTTyaEduClX:t4d8OTttZww22S4tThiJ0C1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1884	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\at.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1884