aa5889a3857f90179a40a1c61635c43f0d7133d18eab9c564d36d075e355de43 | Triage

Analysis

max time kernel
1752s
max time network
1224s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2022 20:20

Sharing

Report Analysis Logs

General

Target

langs/Kazakh.ini
Size

105KB
MD5

fe2b5687f2de60cb55629fd7f0ca9a21
SHA1

5299f36a7b8c5a0b59e3603b8517cb1b3e0f2160
SHA256

1fde00989b3baeb67e6b1f8654cd2fc7216a40a4c5a5a9a64d03d47ee95e76be
SHA512

ebda06bfb42a56ed71915a1f42d84edb795927697eae51fa98bcdbac76ce6dd224c7e7610743050f45649f2d756aea82e47af3ef6ad929ddc9593d8044e3334d
SSDEEP

1536:UdBOtqJCnhr189gDXrbF3h14FMuRv5RI7EhUv1:isH/VG5Rm1

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4904	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\langs\Kazakh.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads