Analysis
- max time kernel
798s - max time network
801s - platform
windows10-2004_x64 - resource
win10v2004-20240730-en - resource tags
arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system - submitted
01/08/2024, 04:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CCleaner_Patch22.exe
Resource
win10v2004-20240730-en
47 signatures
1800 seconds
Behavioral task
behavioral2
Sample
Piriform-BlockerKeyVerificator_RunAsAdministrator.cmd
Resource
win10v2004-20240730-en
8 signatures
1800 seconds
Behavioral task
behavioral3
Sample
Readme.txt
Resource
win10v2004-20240730-en
1 signatures
1800 seconds
General
- Target Readme.txt
- Size 283B
- Sample240801-fa3vgswhpf
- SHA256 9281299c61ba895ef5c21eabc192ce2618c79dd0cbb7aba9373e4d8f0c97a973
- MD5 37545b4e4df08ebff2b56c0031111cf2
- SHA1 073c8409cfd736af8e80523e102a15f879af8f74
- SHA512 0843ba03e631b618fec10365208e252c1341087cd333a811fb11c7d0f8fc9b1a6950ed42cbdbc95a80967263d16203a92ee92f2870262a7377a02f4a2455cf5c
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1712 NOTEPAD.EXE