Resubmissions

15/04/2024, 17:37

240415-v66nksed8w 7

15/04/2024, 17:34

240415-v5ll1sed3z 7

15/04/2024, 17:30

240415-v3fmzsca66 3

15/04/2024, 17:27

240415-v1vdcseb8w 7

Analysis

  • max time kernel
    15s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 17:37

General

  • Target

    WindowsPowerShell/v1.0/Modules/VpnClient/VpnClient.psd1

  • Size

    1KB

  • MD5

    fe0d2479593ef3e9a22171335b248566

  • SHA1

    0c0e19f289c12c115f3a87e3788d85210a52881c

  • SHA256

    7fe7ccdd9c3311513f031317f7e2fbf8c707d8be0bcf3e3e1e46d318959fa9ed

  • SHA512

    4410c3be5c4520cf581b1357e0e516e675fcb27c2811a0011559df41bba5665110b73bb15c4086d0f4127cfab7f6a862b1dad42c1bb1c74b3309e7e3d6762e68

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs

Processes

  • C:\Windows\System32\notepad.exe
    "C:\Windows\System32\notepad.exe" "C:\Users\Admin\AppData\Local\Temp\WindowsPowerShell\v1.0\Modules\VpnClient\VpnClient.psd1"
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads