9f83690b4ba738a40f8993645d5d02d3fda46041bf93a97cbde487fe09e3bb86 | Triage

Analysis

max time kernel
75s
max time network
84s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
31-07-2024 13:28

Sharing

Report Analysis Logs

General

Target

utils/XInputPlus/Loader/ReadMe_en.txt
Size

427B
MD5

95b10e24a898351805ecb781bf4cbd88
SHA1

616db4c5fec7f29c89b9b969379128379d6c4935
SHA256

603736b22b209c3faa38d8f88d9613d0febb00df25cb2931aafc527766ad7f07
SHA512

2c51db288313d7528d2d003c8623aa22889cb88a12612234dcaab79469391a85716584968af5a237f709b6180299aca0a8c59b4d2cd6c4561160fd9fd41ec462

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

4144 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\utils\XInputPlus\Loader\ReadMe_en.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...