1b475e95186ce2a8843516be389b66a6c53c6b77bdac33ffcf5d00af133e7570

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 07:38

Target

output/filter/invalid.txt
Size

8KB
MD5

f1fa3c2243477fa9aafbe7380847301d
SHA1

960bfc63f7f8af7818c19a15c129b1da52ac1e84
SHA256

ddb2a42f09c14e100abed51492a4b6aa7455ebe58f4097837f95d49a85f3b864
SHA512

258f1a72578ddc8c54f72e8968fe0e900fae7484b1645905834cf53f93f40a64f0f8e81b1c1e909550045bca108930fd53afe20163de607ef2c9ab2210e12be8
SSDEEP

192:rkIFq8HF8/5oaDbtUonYbiPVM9Y+xWxVMYWke+Y82RJ7GcLVYCYoSdF12x+ep1DS:1hl8/53btnnYbiPVM9Y+xWxVMYWke+LZ

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1532 NOTEPAD.EXE

pid	process
1532	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\output\filter\invalid.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1532