fd0544bdeb691b88a388b2a51da072c4de37b5f7d9af2a1948d45aed755a80a2

Resubmissions

08/06/2024, 16:27

08/06/2024, 16:18

max time kernel
133s
max time network
136s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
08/06/2024, 16:18

Target
license.txt
Size 5KB
Sample240608-tr5bjadb81
SHA256 78f9b5671c16bf36741046442d44d7ebd438d98fc48665313e8fab791d8efe64
MD5 cf780f5c4be0b2b591af997c8bcd61e8
SHA1 524a6b4d7ef16014aed5572f6eed2e17ddc2a7be
SHA512 ec8b4bb8433a187efbcab06da90572cd53c5b83a175d8805af3d5663b8df6b6b760677b3b02e02371918158af81cdd498830c4a6ce8df88530f3b393621e631c
SSDEEP 96:uE8hju6h4hCZxg9RgpEGsjXyj1imGF4bdXjk3KpaTkS659kQnx1dBHiSkF9tzK/:uEwjuKsgA4+XYdXjA+okS63vZBCSUze
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1384	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\license.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1384