d2c736fc70a887dda619b0098ee25efbc75093bd7f4d2937a08e70be8e66f1ec | Triage™

Resubmissions

24/03/2024, 15:56

240324-tdd77agc8w4

24/03/2024, 15:54

240324-tch5rade983

24/03/2024, 15:47

240324-s8k4jsde857

Analysis

max time kernel
135s
max time network
138s
platform
windows10-1703_x64
resource
win10-20240221-en
resource tags

arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
submitted
24/03/2024, 15:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dark/cursor/Install.inf
Size 2KB
Sample240324-s8k4jsde85
SHA256 ff27beed37267e70cd350fdeb9eb09ed0f239cde02b9ae594ef9d66db64c1ea0
MD5 84823157241dfc0cf277da4536f8a601
SHA1 787ab93b73a36f30a62a3aa82344b23bc57dd02f
SHA512 f429cb8346697ba4258b3c1c2401be2029eb2428d94f6c35ad3c1e9b1fcabf166951d93a2db9364173199007df0a348271c0744b688a8faaddfa95163a71a117
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3192	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\dark\cursor\Install.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:3192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads