be11a0524365455c9b82b76f4d8942ad3b2d2fc3e6807aa683042005183cadb4 | Triage

Analysis

max time kernel
192s
max time network
495s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
24-11-2022 20:56

Sharing

Report Analysis Logs

General

Target

Debug/Management.log
Size

8KB
MD5

ff765d6581fe6568aaae19de239b2e7a
SHA1

78b09b0ce2e59ce87f65251ea903842c1c77046a
SHA256

4dd051de9b04902fc59d411b1c27c42007cacca4ea52e88d71c897cad1d990cc
SHA512

8fa7c766fc1ac48408d964eb9844f9c4a2fb3e33357e736230024788ec71cb3c338397e16f8e556bbcaafd83c58f3af6a55ceaa9daff290b0e687093e5c97a2e
SSDEEP

192:+jfkNaok8wITITp8dNOgNH34lxeDKOgWNh0ctcoAd8dq5XrOGB3Wr:UkNaz8wWWp8dMA34lbLsq5Xqq3a

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

3528 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Debug\Management.log
1⤵
- Opens file in notepad (likely ransom note)
PID:3528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads