Analysis
-
max time kernel
23s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system -
submitted
20-07-2024 20:42
Behavioral task
behavioral1
Sample
ransomware_notes-main.zip
Resource
win11-20240709-en
windows11-21h2-x64
0 signatures
1800 seconds
General
-
Target
ransomware_notes-main.zip
-
Size
741KB
-
MD5
96aa10f49edd9a7ccb2a95fe1d70ec43
-
SHA1
4d049d508c9797e2b8fd2dd21d54f865fa5da7eb
-
SHA256
3404fd569d0704f96ae32f8deb46a557b84c17a549e7878d68b0958c09d5f7f0
-
SHA512
db0faa39d6281ecd35549cf449e486303c4ac9828784c876391761cb8c149d1f3060756afac987c4bf7030d22fff15c07440323fd6e6b6116c1dda7d01a8ad04
-
SSDEEP
12288:InvyL4m7By20SeXpwvh6cSfRLF+77+chT43A8aGo2BK3rfHW7ueFi:6G4m7Bl0Se6Sf5s7WA8aoMrf2SeFi
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\ransomware_notes-main.zip1⤵PID:2268
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3336