14ce93ae01d50b9d2ff3c36c3edd574a9f8bcec56451f3a865fcc210c617a77b | Triage

Resubmissions

19-09-2024 06:30

240919-g9r3psvepe 7

19-09-2024 06:27

240919-g7tthsvdrg 5

19-09-2024 06:21

240919-g4a71avcma 7

19-09-2024 06:17

240919-g127bavejl 7

Analysis

max time kernel
131s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 06:17

Sharing

Report Analysis Logs

General

Target

SOURCE/README.txt
Size

463B
MD5

7c8c065a6d1563cce7a73c3d3fa66fae
SHA1

9c4017613df68ed8802b07175339812ffe5669c8
SHA256

4ae4bc30641801c603c0eb36b2ddfc06081b91cf2e614e6565f489187ef1b027
SHA512

7a1af1932893b791163a4fb9e1677cd9abccb306cf8a35cd74dfc1c55bc3e1194066b7b0e4dac380019204436732c9b831fc6408ab058ccdd3088f81f794ec64

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2396	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\SOURCE\README.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2396

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4324,i,12198811467968044966,17227406646827438786,262144 --variations-seed-version --mojo-platform-channel-handle=3880 /prefetch:8
1⤵
PID:4552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads