3b4fc2a2e594506881d82a8c418e9bcf572b3269dfab952f5ef70ea6a8838884 | Triage

Analysis

max time kernel
124s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06/08/2024, 13:21

Sharing

Report Analysis Logs

General

Target

RevoUninstaller_Portable/settings.ini
Size

3KB
MD5

6e91f903b20f238a02ccab1c48bbde8a
SHA1

daba4ea11ec00cbdaf75d7581e4ceaaad8f64f66
SHA256

6c18f70fed798278806a3fe562d93d53ea347548c001fcda481f6f045f5e8573
SHA512

0949b1f5bb1cab5530d71c021d622d897fd50e7850ed5f76c20012af41580088506f8033380e89afe74c88fb14179b408e5bbafbfe69719827110170f6b870f9

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2864	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\RevoUninstaller_Portable\settings.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:2864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3664,i,11391966286255097843,10588851088187498028,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:8
1⤵
PID:1580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads