591ddc0a974dcf3925377fbcac1f9dfd810a8a2dd450fcc69d2051163bdba912 | Triage™

Analysis

max time kernel
558s
max time network
563s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 07:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
win/ini/wincash.ini
Size 396B
Sample240603-hteccafe8w
SHA256 a23105ef8c2648bde378c125c7c006898f5d91d4bd0d4efb8d76f7371bf6a0ab
MD5 afb683de0cee36f890c2aa5c1c9398d8
SHA1 62519ff8840f82839e55c28a51f58d013628bc16
SHA512 25513f7edf8f8477a64b5afc05f1a41eae6d4c9ea84b36fbab7789186310fd9cae5ca15636e52541e16d030daa2eb3c95ad4efeacb817376b17ff847d808fcdc
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3792	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\win\ini\wincash.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:3792

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads