Analysis

  • max time kernel
    1366s
  • max time network
    1155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-07-2024 08:20

General

  • Target

    nVNC/input/passwords.txt

  • Size

    21KB

  • MD5

    d0b86314bd9473e5b8b9ee7c6422e42b

  • SHA1

    75f01eb81e93874d440a326b00768e65bf43245d

  • SHA256

    3f0ef05d29d85b3b97ee356679f0a2dc21b774a05e052209231809755b1fea3b

  • SHA512

    3c25399c8d4ac75e2f05184645da92234220f596bc14ab336176bdf346ec79c6c457dd0c90c6b3237d61be88a3bd2a14f96b52edeeb7e44b9298bee8316f202e

  • SSDEEP

    384:jaF4gH0l8CqQpTMDm1AFyvIOA7+up0BdqNiO9A/IV2UMj80evMIw:jaF4blhqQ9M5FR/7+kC4UBZGvC

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\nVNC\input\passwords.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1160

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads