fc249baddd791772998825753f2ed6afb5cebab717f2017c5f8c78267173459e

Analysis

max time kernel
840s
max time network
842s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21-09-2024 14:34

Target

samples/Everything.ini
Size

20KB
MD5

472ee5a9b076aede5574eb747412cc8a
SHA1

cb1541d2aad53309e82c44cb99c220e02bc219d2
SHA256

7854d3d94db23ed7e453f30e4a5e302bea209b2ebb60b5554dbc78ac1caefe4d
SHA512

22407550d8c602fc2f6c70a671ec948770f8df494e2613d66efb8625f75adaea8047d35931e97c6a841b786fca9b2922e805799f149b58f34c881e5605b8f86a
SSDEEP

192:RjCxnELo+ny9QOL4jwnTef2JFTAiwTMisXZiPgCSjvtM8nbVwoQT7zAu+Ztul4A8:Rug6TeEFTA+isX/M8nYuZ4z8lJCK

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2548	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\samples\Everything.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:2548