8b0e9f5b640d5b809997b62dfec98faf284181b1cef0ce94163986ca62de980a | Triage

Resubmissions

09-08-2024 23:40

240809-3n8n8avflm 8

09-08-2024 23:39

240809-3nhg2avfjk 8

09-08-2024 23:33

240809-3j53jaygld 8

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
09-08-2024 23:33

Sharing

Report Analysis Logs

General

Target

RNDIS.inf
Size

3KB
MD5

7ee148ac84fb59452f63e2367ab63f44
SHA1

cac905c60c636e7c3d4584529532a30b79155589
SHA256

d4be3054b3d780d2dd7bed4cdc35824b324e7df59a390a54a43f84de1fb75666
SHA512

c52a9e783da436afe8dd6146f0fbb4a25fe7c02a10b4ee206f471b34abaa5be9f040bc9a26cb570adebc74bf69c4e52d8145edd53a80234e4fb500cfc04333d6

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

2328 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\RNDIS.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:2328

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...