Overview

overview

10

Static

static

3

LastActivityView.chm

windows7-x64

1

LastActivityView.chm

windows10-2004-x64

1

LastActivityView.exe

windows7-x64

7

LastActivityView.exe

windows10-2004-x64

10

Stub.pyc

windows7-x64

3

Stub.pyc

windows10-2004-x64

3

readme.txt

windows7-x64

1

readme.txt

windows10-2004-x64

1

Analysis

  • max time kernel
    69s
  • max time network
    70s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-07-2024 12:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    readme.txt

  • Size

    15KB

  • MD5

    331b2daa1922a441f02a38c7a2248312

  • SHA1

    d3baa51871f5128bd216706b56094a7bacfc0793

  • SHA256

    f3d8cd1a5d64d61b17ef4918542f2d6a531412b1317d48cc32fb74ffd8acbe88

  • SHA512

    e151de0c1cc3ce9764e568fb7ae023b98413cf85c2a335591eedc3426682a7928444f5fb73b4a084559abad8c03a1b03de3453cabcb03c8eb9b115a75644a5b9

  • SSDEEP

    384:UmfiY7ABU+H2imTAh0JLFjYdVVh+qWoIP:UmfiY7AS+xOJhsdjVW3

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\readme.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads