829d348eb2637386211bfe31b9ce1cca1c545e3a18a60bf20513a969fe97596b

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30-05-2024 17:24

Target

extraced_code_memory.txt
Size

137KB
MD5

12bfefa9e6df5f0a2ebcddfc035c1f79
SHA1

7a26677b24631f284f1e71a89fb2bb897b48ec88
SHA256

8f918a95006baccce615a52f2c8c3fc093c41dbd8c6b88ab80fdd6e3103de0e3
SHA512

b529d2443dcb09a433cb2d6179325803e2814d4eeef8fb570c95a410949301db7e196d6bc1225bc5d8adca1c426e90644646b093c7382ca05ec7c404414ba22f
SSDEEP

1536:pQG31xBgVz8MCxGvOzuaJKnjzWu5dpfWvnZkA6Il9tXnRElCz3yl7RYFmBO2+TNY:yZGaEj93TNrYnGeq844KtQT

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2884	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\extraced_code_memory.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2884