67f15e7ebaebe62fd6bb54633dc1ae4cac2eca68b635f134d1bcbe29d3cfbafc | Triage

Analysis

max time kernel
1368s
max time network
1172s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27-05-2024 05:08

Sharing

Report Analysis Logs

General

Target

Localcfg.ini
Size

432B
MD5

8a7c2995497b05772ab3144c8381977b
SHA1

10201c2b7cb4a424c9b6af5f3c552a9488e3a7d4
SHA256

45b069d9e0e2deb735a6a6bf30f188e01961f75d362d9b038c6daa3f96870f33
SHA512

1b7f8c8db1c2e37f964f7a77710ea2c6d6883dfc7747a1af604cfca853d468858f7657f516017ed22fd39c22d92199f2b37802514c90141ed37b5feb0c9e0e75

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

3388 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Localcfg.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:3388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...