Resubmissions

20/06/2024, 03:53

240620-efl89a1hmp 7

Analysis

  • max time kernel
    146s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/06/2024, 03:53

General

  • Target

    MegaHackInstaller/licenses/qt.txt

  • Size

    46KB

  • MD5

    388503bd2d80d0e295ee786af9888189

  • SHA1

    b4f80739806f793074f5073f58cbc289322ef87e

  • SHA256

    3304085ea87dc24df52891b8e8a322ea9d8d4f65aac656cab6a625757df7fceb

  • SHA512

    1244e38f8f5df4cdcd7123e0a113cc610d6bc9aef3373ac7dc54be3c0e3914649fd4b0cd1db76c22ff043a532f059d37f5b0ecf633d88a941d1f7f18aa3b2340

  • SSDEEP

    768:nEcUnb61gnQmidjr1ETomLMxPuO7RguaFYHrazjN1jYmOhm:E61Pmi6oJ97euHelYnhm

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\MegaHackInstaller\licenses\qt.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads