5fd4ee77422fdeca0bd432241855b562a6c1162ba734579c2cf7557f2829c9e2 | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19-07-2024 20:29

Sharing

Report Analysis Logs

General

Target

Phoenix/multitokens.txt
Size

70B
MD5

a47b11d7854e5b24c97de342787d1ac3
SHA1

d0f0481e7a7896c7bb566e2441cc80ec408049cd
SHA256

a5ff31fb3008a9804f3ffc95772f232f7ccf8afc43237e489ffb0205bd8fa914
SHA512

361dc547a951942ef973843332c84dfd66f47714552befe06953a3cef15e0fc0d1ce53cc42b2442c0a27b06350548707db0a9c3ec8113ee3f751fc4cae04a7cb

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

2020 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Phoenix\multitokens.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads