aa5889a3857f90179a40a1c61635c43f0d7133d18eab9c564d36d075e355de43

Analysis

max time kernel
1620s
max time network
1591s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2022 20:20

Target

langs/Japanese.ini
Size

91KB
MD5

36d47bfae8d0d48d56b7b1feb3b317e7
SHA1

1d8d59aa40f765319fcb70a9f49e997aca305b89
SHA256

9077b41d743ed6af51cd9b8aedaebb6d1e0e6217825635a1aa9451994efaff0f
SHA512

b510a5b17e52778b87f58aaa61f222f11c6190a988440789d1d40591aebdcc7311f7bb3bee9621ab8d971dc2de1ec6ed4d52598b3808dd689f693c3e5897f938
SSDEEP

768:wPZoCIywqTgXCaNnWYjV6UDFlv0Gaf9xS7ua6PE0FtrqGv0ZQkxKQRTM94DGNWdN:1CIywqTKnWKV5GAQkxHKUfxJYNeNx

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4372	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\langs\Japanese.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4372