Resubmissions
19-09-2024 06:30
240919-g9r3psvepe 719-09-2024 06:27
240919-g7tthsvdrg 519-09-2024 06:21
240919-g4a71avcma 719-09-2024 06:17
240919-g127bavejl 7Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 06:17
General
-
Target
SOURCE/config.ini
-
Size
7KB
-
MD5
add427035968bc6f8bcdf0c5d7580495
-
SHA1
7c1d13771b0546c31b87b36d1f158665ba9f793b
-
SHA256
66232a4d8677cd50612eaebc664b2f2f3556b497d5bf8657967c259ef4723b68
-
SHA512
085c3f314f556fe2667df998eec6114f017849746a6691ea2e0bffd6fc8ddc5a1c00e0bd25caca233cbf4b3db59072cce212681c29a480220f1584ff26e1ee3c
-
SSDEEP
192:ByNwQDxO8vcgBPcJvcgBvF0VBotrjTZv2ctKpm8hJ3bK:ByNwaxO8vcgVevcgoIl2ctKpm8hJLK
Score
1/10
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\SOURCE\config.ini1⤵
- Opens file in notepad (likely ransom note)