63be0d6e0b4a815bc11ff4488e3eab18cdaf825a2cad89a5ab1a4673d3bea662

max time kernel
406s
max time network
396s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
12/06/2024, 18:11

Sharing

Target
FullFilE.ini
Size 4KB
Sample240612-wskpmavble
SHA256 8d282cbf168acc3ad67ff8d355a38e8eab5d1c3b19955eb964fd979465de32d1
MD5 0e9457ed4670e3d5d584963386438590
SHA1 ac7cbbf308faa6e41f1f37def0059945597ca350
SHA512 5e4874f9752d079973b454468bd3415a5877819349f0143fbfa10ef72500c8d4a05a925cc2cb1a586daf4db104b81b5389c0f4c288ba23d354a719485841612d
SSDEEP 96:kRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRi:kRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRi
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3400	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\FullFilE.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:3400