Overview

overview

10

Static

static

AH-703.iso

windows7-x64

3

AH-703.iso

windows10-2004-x64

3

AS.js

windows7-x64

10

AS.js

windows10-2004-x64

10

fix/adjutant.js

windows7-x64

3

fix/adjutant.js

windows10-2004-x64

7

fix/data.txt

windows7-x64

1

fix/data.txt

windows10-2004-x64

1

fix/hypers...ss.ps1

windows7-x64

1

fix/hypers...ss.ps1

windows10-2004-x64

1

Resubmissions

28-11-2022 19:10

221128-xvd6ashh56 10

28-11-2022 19:09

221128-xtsmashh23 10

28-11-2022 15:04

221128-sf2wlacc29 10

Analysis

  • max time kernel
    151s
  • max time network
    189s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-11-2022 19:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fix/data.txt

  • Size

    630KB

  • MD5

    be6d4df1763d3f91b6db17aa0eee9d07

  • SHA1

    3618ccdde4d819cdb211c496e9a7667eceb1d48a

  • SHA256

    6da554b8972aeb32e3e0629ccc8be44c2370ed98c000ecde1789dd84cd474ff7

  • SHA512

    f1cc1b4fc10819c85550bf7973021cec18c99cc749424224cb8572971e80ea055c9483d9d190556d768b81cf5efd0ab0c952260ad61d10a3e633d8686e97b238

  • SSDEEP

    12288:Im1Mcw5EO6dHvDe0P3lx5EBto8BkfzNbuTyGrC6N2c2mcsAMzRGBRA4cZDA:rMFEO6dHvDe0P335EXpUNSleQ2cYCGLx

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\fix\data.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads