8301e344371b0753d547b429c5fe513908b1c9813144f08549563ac7f4d7da68 | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
08-08-2024 23:19

Sharing

Report Analysis Logs

General

Target

desktop.ini
Size

504B
MD5

06e8f7e6ddd666dbd323f7d9210f91ae
SHA1

883ae527ee83ed9346cd82c33dfc0eb97298dc14
SHA256

8301e344371b0753d547b429c5fe513908b1c9813144f08549563ac7f4d7da68
SHA512

f7646f8dcd37019623d5540ad8e41cb285bcc04666391258dbf4c42873c4de46977a4939b091404d8d86f367cc31e36338757a776a632c7b5bf1c6f28e59ad98

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1756	NOTEPAD.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1756	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\desktop.ini
1⤵
- Opens file in notepad (likely ransom note)
- Suspicious use of FindShellTrayWindow
PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads