9ed5767db68fb669b3f18a0565cae471ee3800b94a187c4512e5a6691797c511 | Triage

Resubmissions

27-11-2024 20:39

241127-zfpdtszjes 6

27-11-2024 20:33

241127-zbwbksvqhl 6

25-11-2024 22:14

241125-15w1mswlcp 6

25-11-2024 20:57

241125-zryrmswke1 6

28-09-2024 18:21

240928-wzje5ssdlc 10

Analysis

max time kernel
91s
max time network
103s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241023-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
25-11-2024 22:14

Sharing

Report Analysis Logs

General

Target

AutoUpdate/config.ini
Size

52B
MD5

5cc36a5a9945e4fbda1cc8b475f98ea9
SHA1

16ff4141e975705252b9c556c5da8c84e7dbc74e
SHA256

61d88eb427ba7668f56c7391410c4de3a8e17cde7baba80291f8a06efafbef7c
SHA512

8b451ca92dd61ace8fc6cc4bcfc09499aa3c006803a7bdca1bdac9ee40a7b8fc9311e28078f07fbe4fbf1d40d71ffcebcf49a440ca0c6c100391fea4ee888a9e

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1872	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\AutoUpdate\config.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads