Overview

overview

10

Static

static

9

qL7tumRgxLj.zip

windows7-x64

1

qL7tumRgxLj.zip

windows10-2004-x64

1

README.txt

windows7-x64

1

README.txt

windows10-2004-x64

1

openMe.rar

windows7-x64

3

openMe.rar

windows10-2004-x64

3

Boostrap/Solara X.exe

windows7-x64

10

Boostrap/Solara X.exe

windows10-2004-x64

10

$TEMP/Animated

windows7-x64

1

$TEMP/Animated

windows10-2004-x64

1

$TEMP/Bennett

windows7-x64

1

$TEMP/Bennett

windows10-2004-x64

1

$TEMP/Broker

windows7-x64

1

$TEMP/Broker

windows10-2004-x64

1

$TEMP/Dell

windows7-x64

1

$TEMP/Dell

windows10-2004-x64

1

$TEMP/Departments

windows7-x64

1

$TEMP/Departments

windows10-2004-x64

1

$TEMP/Grow

windows7-x64

1

$TEMP/Grow

windows10-2004-x64

1

$TEMP/Implementing

windows7-x64

1

$TEMP/Implementing

windows10-2004-x64

1

$TEMP/Int

windows7-x64

1

$TEMP/Int

windows10-2004-x64

1

$TEMP/Invalid

windows7-x64

1

$TEMP/Invalid

windows10-2004-x64

1

$TEMP/Italiano

windows7-x64

1

$TEMP/Italiano

windows10-2004-x64

1

$TEMP/Jd

windows7-x64

1

$TEMP/Jd

windows10-2004-x64

1

$TEMP/Latitude

windows7-x64

1

$TEMP/Latitude

windows10-2004-x64

1

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-06-2024 08:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    README.txt

  • Size

    17B

  • MD5

    3ddd4ab42a9f89735bb14dadf6d593d7

  • SHA1

    a6addc3240f39b5a4252fff6a41d565a295f2c61

  • SHA256

    dafec9ca2e314e02dafa5a824e14cd8df64cafb3df0246282d0402f9ca713063

  • SHA512

    656849caf13910350835ce00d272d91af0dae6c6419cd7723b8e79d573bd62ddcbdf1b3772fb8764998c61367cf467c000666665e53150e4511589eab895151a

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\README.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads