3f0a29a31524c5fb823e95aa5097ef45eb9c94e4298549d9ae65e04a3c396406 | Triage

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11-08-2024 12:31

Sharing

Report Analysis Logs

General

Target

SolaraB/Solara/workspace/drax/configs/da_hood/lvok.txt
Size

2KB
MD5

58de84daadb2d92024121293fc0ee8ca
SHA1

186cc02a1c9ed7054ea541dbc6c5e2f47cebee2f
SHA256

27b1487416185e8ff282509eb036cd78ab3f5c78578b664129194bda00541b8e
SHA512

f5caeb282919cd0c9645edc00b50855dc620516839ebe135eb1eae4869b2112a3bd38615773c6729c38c7062a9ddeabbd9f07c7e69f9207b1305a5c039f62243

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3636	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\SolaraB\Solara\workspace\drax\configs\da_hood\lvok.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads