Analysis
- max time kernel
16s - max time network
17s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system - submitted
08/04/2024, 20:42
Static task
static1
Behavioral task
behavioral1
Sample
rare.txt
Resource
win7-20240215-en
1 signatures
30 seconds
Behavioral task
behavioral2
Sample
rare.txt
Resource
win10-20240404-en
1 signatures
30 seconds
Behavioral task
behavioral3
Sample
rare.txt
Resource
win10v2004-20240226-en
1 signatures
30 seconds
Behavioral task
behavioral4
Sample
rare.txt
Resource
win11-20240221-en
4 signatures
30 seconds
General
- Target rare.txt
- Size 26B
- Sample240408-zhay8abd56
- SHA256 1c72e30dd7dfa0b51e54279b72e9743beb3b5037868ad20fcea977f5520d1e9e
- MD5 9c5a0f2dbbeb6ad4c245312efed6f8d6
- SHA1 d2746ac7fa695595d464b2d8004410377081051e
- SHA512 acc6b98cdfa7e78c5392ec8e9913d5a982670ce171c82e79f2f91e96efdabab57ef2871fbed9372c258765b0af9ffb7ceac57d842a3549a68e65c4fd40e7a38c
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1416 NOTEPAD.EXE