420a9b53025c922bd4be1d93c2812c1d6b121575eba5d1215500c2d90aa9282d | Triage

Analysis

max time kernel
105s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
15/09/2022, 17:05 UTC

Sharing

Report Analysis Logs

General

Target

just/well.txt
Size

287KB
MD5

d3f5574b3289781b12acfcbcf36d3dc4
SHA1

d45cc4df8a86fa089d3973fbada16731992b6859
SHA256

7e37fc92e4cc24c67723ac712dbc9e006f4c18611cd63788ac90e60c238d89fa
SHA512

9aa6d2e9c585479f7229542f59327416eb880d58211400aed235335b07ab11d3c00b20212f6bfcc7b0988fa8dd10e531122aca96ede5f7657a0e57a12ef99edc
SSDEEP

3072:YMNoIk1cgpxTMjkG0hj3k32JXdk77kJo3G7MoNjrXQkTMa:YkoPGgpxTPG0hbcKu7o2G7MIjrHTT

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
228	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\just\well.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:228

Network

No results found

209.197.3.8:80

322 B
7
20.189.173.5:443

322 B
7
104.80.225.205:443

322 B
7
209.197.3.8:80

322 B
7
209.197.3.8:80

322 B
7
209.197.3.8:80

322 B
7
13.107.42.16:443

322 B
7

No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads