5fd4ee77422fdeca0bd432241855b562a6c1162ba734579c2cf7557f2829c9e2 | Triage

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19-07-2024 20:29

Sharing

Report Analysis Logs

General

Target

Phoenix/token.txt
Size

27B
MD5

9ef649f0b54e4a3d142b8327e8aec09e
SHA1

a8e34bf996b8f3ad763964bf4620c25b01713fdb
SHA256

6286b1bbcb0466594130105a926d01602a2bd2d9caf682220229b5bcacecb2fb
SHA512

c708531a4a78758f7991715149e6a9d310d6b2b79fb2cfce9360889b25a2bac2b80bd567dc25f4de555149bd8f880513305aaa462cf006f751d7122fb44913d0

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1124 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Phoenix\token.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads