591ddc0a974dcf3925377fbcac1f9dfd810a8a2dd450fcc69d2051163bdba912 | Triage™

Analysis

max time kernel
533s
max time network
578s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 07:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
win/ini/repsserv.ini
Size 693B
Sample240603-hteccafe8w
SHA256 5aeff9a186a3907078031beb1f9448ecb2eeffd615f09cb20d4bd401962283f8
MD5 c20fdf455bcfa0ad7dedcc056f747719
SHA1 2d213242607a8fa4b77e86b1d0326c6efc09455a
SHA512 fef8f33bdee95853c1a6dce5e449465e03888849ce4c7d84c1a36f23a469a75f2a6551a952a45cbe39b70a678fb672675d0be68a0477e1fca45905ba5693903b
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3236	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\win\ini\repsserv.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:3236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads