Overview

overview

10

Static

static

3

TangoGen.rar

windows10-2004-x64

3

TangoGen/T....3.exe

windows10-2004-x64

10

TangoGen/assets.js

windows10-2004-x64

1

TangoGen/i...ns.txt

windows10-2004-x64

1

TangoGen/license.txt

windows10-2004-x64

Analysis

  • max time kernel
    0s
  • max time network
    3s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/04/2024, 10:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

Errors

Reason
Machine shutdown: "{\"level\":\"info\",\"time\":\"2024-04-20T10:35:39Z\",\"message\":\"Dirty snapshot: /var/lib/sandbox/hatchvm/win10v2004-20240412-en/instance_11-dirty.qcow2\"}"

General

  • Target
    TangoGen/license.txt
  • Size 6KB
  • Sample240420-mflaysec84
  • SHA256 a19d58aaab15c4d0019e569d1c073d1b5286fdd37dbeee7a58a7d1ae76045ae1
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\TangoGen\license.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1168

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads