ec4bf6cfc55df437a044d2f779cfd3619ddc96d4c7c5cb6621f38e9e30ec1041 | Triage

Analysis

max time kernel
150s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05-09-2022 11:04

Sharing

Report Analysis Logs

General

Target

langs/Danish.ini
Size

107KB
MD5

5f50b22de0efb245cd3b8f2fb50a6d3d
SHA1

be369ffd0c47ff92b3aa5c259ab9f4d40807b687
SHA256

59df77a75aca7c0a8574f6d4b5be5632908c4fea8634f4748e36ff6fee40e317
SHA512

f3fec19409ea564bd68f4bd1253297ed8bcbe86554422a22891c61ee237f581f95f6976512e53bcabc5cafe3411343e660d3fb8f398f95f9c1efcec8eaa4367a
SSDEEP

1536:gmGRkLzUJnbfeKzcqt5G+qX59CcZEY9dHbm/c4C1CgqfRG:gmGRbnbfNRt5G+qX59CcNdX47G

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

3436 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\langs\Danish.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:3436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...