c529cd95c0c85ca18df3e690f840e51d0be33b5b92f8bf1e9f91821eaedac68c | Triage

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/04/2024, 20:22

Sharing

Report Analysis Logs

General

Target

file.exe
Size

39KB
MD5

f1b14f71252de9ac763dbfbfbfc8c2dc
SHA1

dcc2dcb26c1649887f1d5ae557a000b5fe34bb98
SHA256

796ea1d27ed5825e300c3c9505a87b2445886623235f3e41258de90ba1604cd5
SHA512

636a32fb8a88a542783aa57fe047b6bca47b2bd23b41b3902671c4e9036c6dbb97576be27fd2395a988653e6b63714277873e077519b4a06cdc5f63d3c4224e0
SSDEEP

768:YRQnUhG5bZDOTpkdD82YbQkRFokFWIILPUh:FWObZDOTpk5T6zqAh

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 2 IoCs

pid	Process
2408	NOTEPAD.EXE
2732	Notepad.exe

C:\Users\Admin\AppData\Local\Temp\file.exe
"C:\Users\Admin\AppData\Local\Temp\file.exe"
1⤵
PID:2104

C:\Windows\System32\NOTEPAD.EXE
"C:\Windows\System32\NOTEPAD.EXE" C:\Users\Admin\Desktop\RestartSet.cmd
1⤵
- Opens file in notepad (likely ransom note)
PID:2408

C:\Windows\System32\Notepad.exe
"C:\Windows\System32\Notepad.exe" C:\Users\Admin\Desktop\AddSplit.js
1⤵
- Opens file in notepad (likely ransom note)
PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads