Overview

overview

10

Static

static

daa40acf17...cf.iso

windows7_x64

3

daa40acf17...cf.iso

windows10-2004_x64

3

7683275328...79.dll

windows7_x64

10

7683275328...79.dll

windows10-2004_x64

10

INV871623.txt.lnk

windows7_x64

3

INV871623.txt.lnk

windows10-2004_x64

10

THjkgeCbhjm.ps1

windows7_x64

10

THjkgeCbhjm.ps1

windows10-2004_x64

10

notice.txt

windows7_x64

1

notice.txt

windows10-2004_x64

1

Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    01-07-2022 21:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    notice.txt

  • Size

    366B

  • MD5

    8054a00a327955bb34ef9d930dc19a20

  • SHA1

    7445f99b93469efb9bd5746cf5c4520f25894150

  • SHA256

    d82a953766e7951c5c49923cdd361377e17d3bb6b321416766344ceb3a6ac165

  • SHA512

    8f0359ab757551af5e8feb7857d3434fdffab0f7f9c26cefcf0fac0dc6d5e31b163aefc75252b340fe7eaeafea6677e894ef5958177680a617bde232a00a58e9

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\notice.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/836-54-0x000007FEFB9A1000-0x000007FEFB9A3000-memory.dmp

    Filesize

    8KB

    Download