9f83690b4ba738a40f8993645d5d02d3fda46041bf93a97cbde487fe09e3bb86

Analysis

max time kernel
57s
max time network
76s
platform
windows10-1703_x64
resource
win10-20240611-en
resource tags

arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
submitted
31-07-2024 13:28

Target

utils/XInputPlus/old/ReadMe_en.txt
Size

7KB
MD5

e1dc62bc3bde97981ed797b87df3d8f5
SHA1

c20d6b5ee058257d814ec16d668c40201371a663
SHA256

15427941bde626a7d9a53f1846b2a4040e707613c2219b59e2a72f784b3911f4
SHA512

cd3c4809f8d49973c463d9af6ff4685697ea38018db1ac97521eb5505b8c61615642b514ee7c43a713e3c2de0f31da89ed9715f0dbdedaf1da51a97c753b0a3d
SSDEEP

96:eScXC4wlqbCWkMRTpyoVa+PQpflljiVAiC9FW6GXtlIxOQrUOnMqmRHgQH7Y:eRpVlpXnyllji+pFW6GKiJaQH7Y

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

4256 NOTEPAD.EXE

pid	process
4256	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\utils\XInputPlus\old\ReadMe_en.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4256