3c5e0085adfb6d60d77aa3b3f4a8cf2e3beb1139de69d1f921c6e1017da16a9f | Triage

Resubmissions

02/04/2024, 18:02

240402-wmv86shb83 7

02/04/2024, 17:49

240402-wd8g5sgh3s 7

Analysis

max time kernel
139s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
02/04/2024, 17:49

Sharing

Report Analysis Logs

General

Target

JIGUtility_V2.0.8.0_20230112/ASUSR_ParsingRecord/ASUSR_ParsingRecord/PwrSequenceErrorCode.ini
Size

1KB
MD5

8699fb95866d1a3ba3ca71460bf2a349
SHA1

310f2955a1be8a974d6772a5fa607c1b3b735e31
SHA256

217539274e9a9c4503d1233415404f6d19d74b96db4ef9c42dd6da32ea9b2be3
SHA512

9822c1a6b302e775884205435b504eb65e0c588c730c624eac709af15673f26ee703b6e062e067542a2b5057942dca1c342f049c60f6d51df9f92785a56681ff

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4516	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\JIGUtility_V2.0.8.0_20230112\ASUSR_ParsingRecord\ASUSR_ParsingRecord\PwrSequenceErrorCode.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4516

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3792 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:8
1⤵
PID:208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads