67f15e7ebaebe62fd6bb54633dc1ae4cac2eca68b635f134d1bcbe29d3cfbafc | Triage

Analysis

max time kernel
1713s
max time network
1176s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
27-05-2024 05:08

Sharing

Report Analysis Logs

General

Target

PlayConfig.ini
Size

328B
MD5

15490f41d45c82157390430cf8e726d6
SHA1

7062b5fdae80206fcb86c6a9798cb51a93f8ca81
SHA256

3085ba731159efc6da54a9c8effcd070a18fb187d041036053651afb8d2c8fb6
SHA512

a783ff60a460b22dd98487c8cedcd02381463e5a3fcc664b2066c37e0b7ea787938edb57e647f484437e57b52515d77d055af1099613c26154e5b9ec1fa4a802

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

3916 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\PlayConfig.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:3916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...