Overview
overview
10Static
static
daa40acf17...cf.iso
windows7_x64
3daa40acf17...cf.iso
windows10-2004_x64
37683275328...79.dll
windows7_x64
107683275328...79.dll
windows10-2004_x64
10INV871623.txt.lnk
windows7_x64
3INV871623.txt.lnk
windows10-2004_x64
10THjkgeCbhjm.ps1
windows7_x64
10THjkgeCbhjm.ps1
windows10-2004_x64
10notice.txt
windows7_x64
1notice.txt
windows10-2004_x64
1Analysis
-
max time kernel
91s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
01-07-2022 21:13
Static task
static1
Behavioral task
behavioral1
Sample
daa40acf17585b2246dc1e9e6610964368f6fb854fdc16a1972c7908c23ab5cf.iso
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
daa40acf17585b2246dc1e9e6610964368f6fb854fdc16a1972c7908c23ab5cf.iso
Resource
win10v2004-20220414-en
Behavioral task
behavioral3
Sample
768327532892733679.dll
Resource
win7-20220414-en
Behavioral task
behavioral4
Sample
768327532892733679.dll
Resource
win10v2004-20220414-en
Behavioral task
behavioral5
Sample
INV871623.txt.lnk
Resource
win7-20220414-en
Behavioral task
behavioral6
Sample
INV871623.txt.lnk
Resource
win10v2004-20220414-en
Behavioral task
behavioral7
Sample
THjkgeCbhjm.ps1
Resource
win7-20220414-en
Behavioral task
behavioral8
Sample
THjkgeCbhjm.ps1
Resource
win10v2004-20220414-en
Behavioral task
behavioral9
Sample
notice.txt
Resource
win7-20220414-en
Behavioral task
behavioral10
Sample
notice.txt
Resource
win10v2004-20220414-en
General
-
Target
notice.txt
-
Size
366B
-
MD5
8054a00a327955bb34ef9d930dc19a20
-
SHA1
7445f99b93469efb9bd5746cf5c4520f25894150
-
SHA256
d82a953766e7951c5c49923cdd361377e17d3bb6b321416766344ceb3a6ac165
-
SHA512
8f0359ab757551af5e8feb7857d3434fdffab0f7f9c26cefcf0fac0dc6d5e31b163aefc75252b340fe7eaeafea6677e894ef5958177680a617bde232a00a58e9
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes:
NOTEPAD.EXEpid process 4236 NOTEPAD.EXE