022e498fe973889e1c2ad0964f0a097a87feb14ceb314a5c19c7ff5d9c7ebb36

Analysis

max time kernel
129s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 10:23

Target
Insyde/segwindrv.inf
Size 4KB
Sample240528-mexmlage85
SHA256 e1449864c7403b9cd3d828c6fc9710fe1fbb3f35c7b6522a5dcbcf97685f40d7
MD5 843fb7475608ce359da7cbd48fa3ab1d
SHA1 ae16643aa1756b34391e4c615958343ecb17b153
SHA512 9db610ebff1ab1e24147abadf10f978eab95358f2b0806d17fb8df6e53723b0523dd26d0207430d029f5b6826a02c3a5d73ff01d8f6e28d53e82c230075f2b34
SSDEEP 48:rRFH5oXHIYYzQS6QLOOLcqnXT+E6tE58HWi1LRfuwGRfuwpkHo7uFf:rCIYY0SzgLRfuwGRfuwi
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3712	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Insyde\segwindrv.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:3712