Analysis
-
max time kernel
0s -
max time network
3s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
20-04-2024 10:24
Static task
static1
Behavioral task
behavioral1
Sample
TangoGen.rar
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
TangoGen/TangoGenV1.3.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
TangoGen/assets.js
Resource
win10v2004-20240412-en
Behavioral task
behavioral4
Sample
TangoGen/instructions.txt
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
TangoGen/license.txt
Resource
win10v2004-20240412-en
Errors
General
-
Target
TangoGen/license.txt
-
Size
6KB
-
MD5
0b09566254b011d989decf0e23a902eb
-
SHA1
3ae5cd6be73daf418b8deee9c865cf78225838c9
-
SHA256
a19d58aaab15c4d0019e569d1c073d1b5286fdd37dbeee7a58a7d1ae76045ae1
-
SHA512
4e22e58f925879306261e5993039e1d84d87f8fecc0f9fdad534da55b6fd22be77e622a4077d8d521f7734e5535f66853d581155987e2f3607e2d386938c218b
-
SSDEEP
192:uEwjuKsgA4+XYdXjA+okS63vZBCSUziJm:eNs8+QRVxBRU1
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid process 1168 NOTEPAD.EXE