Overview
overview
10Static
static
Cancellation#9860.iso
windows10-2004-x64
3Cancellation.lnk
windows10-2004-x64
10inexhausti...ed.cmd
windows10-2004-x64
1inexhausti...rt.dll
windows10-2004-x64
10inexhausti...nd.txt
windows10-2004-x64
1inexhausti...ee.txt
windows10-2004-x64
1inexhausti...ss.jpg
windows10-2004-x64
3Analysis
-
max time kernel
60s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
26/10/2022, 21:55
Static task
static1
Behavioral task
behavioral1
Sample
Cancellation#9860.iso
Resource
win10v2004-20220812-en
Behavioral task
behavioral2
Sample
Cancellation.lnk
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
inexhaustive/caged.cmd
Resource
win10v2004-20220901-en
Behavioral task
behavioral4
Sample
inexhaustive/consort.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
inexhaustive/havilland.txt
Resource
win10v2004-20220812-en
Behavioral task
behavioral6
Sample
inexhaustive/tutee.txt
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
inexhaustive/waviness.jpg
Resource
win10v2004-20220812-en
General
-
Target
inexhaustive/tutee.txt
-
Size
281KB
-
MD5
e131110f0aa9bc4339beb8d6e7a44e68
-
SHA1
20f4230b1d0ad36b5eee37f5087d5cba2c62351e
-
SHA256
cbca00ba9cb9342bca43d39ce121852e4bcdadc9d8085582c3c961fbefb23dac
-
SHA512
aaae658739c4b867f1d028aa4b27837f0d25c4bd709c0b4c0f8f620b1286eebe6a3d63387f35fd2ace460c57c1d0c59ca8709e1258565e8fcc89db00074803f0
-
SSDEEP
6144:+bVGX0w4O+UXNVlD0C3iW5hWXJhbp3NhbVdEXNYLXplD2bsytWkGMxvlDZMbPoah:8wmCdhZtZQem
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4100 NOTEPAD.EXE