1d8c80f52a16666330f204788cc9eb42d0439a4ff81ae39ffdf3ad3103751366 | Triage

Analysis

max time kernel
300s
max time network
193s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24-05-2024 15:33

Sharing

Report Analysis Logs

General

Target

Protect/Webhook.txt
Size

124B
MD5

b58e50429077fe682b07c7b3e64bb3fd
SHA1

cc762ec39281c7a7c4f865ad013c874f70934c1d
SHA256

93c539de495b393440bb1f3f36cf1f843872a99694292997fe1a57f7c1e4ece0
SHA512

7206dc0986f6d4d452345561183208f9a3913895c8178f8abb23128747fa4a284e94a1eecd313764ccbfb4df41c72681471f269c1b361cdf5f4fe8c4671dfe09

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

400 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Protect\Webhook.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...