Resubmissions

15/04/2024, 17:37

240415-v66nksed8w 7

15/04/2024, 17:34

240415-v5ll1sed3z 7

15/04/2024, 17:30

240415-v3fmzsca66 3

15/04/2024, 17:27

240415-v1vdcseb8w 7

Analysis

  • max time kernel
    12s
  • max time network
    20s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 17:34

General

  • Target

    WindowsPowerShell/v1.0/Modules/Microsoft.Windows.Bcd.Cmdlets/Microsoft.Windows.Bcd.Cmdlets.psd1

  • Size

    2KB

  • MD5

    9b07cb90e78d467a0de7be0f4f958fe9

  • SHA1

    c7014872c3c02f3c45b40aa109d113c0fa1002f7

  • SHA256

    e94186903107b294eb1c8a9bf74068b4c4e828843c4d33696af733ee2e3dbef3

  • SHA512

    6bc046823f5d9dfe1bf7c39f03a7246524f9b285c89e32e24c1bb9e89b571c56a7db900e6d3b4f5ec06febfbe2c75d67fa1f13347bfd96908ea6835493738109

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs

Processes

  • C:\Windows\System32\notepad.exe
    "C:\Windows\System32\notepad.exe" "C:\Users\Admin\AppData\Local\Temp\WindowsPowerShell\v1.0\Modules\Microsoft.Windows.Bcd.Cmdlets\Microsoft.Windows.Bcd.Cmdlets.psd1"
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads