aa5889a3857f90179a40a1c61635c43f0d7133d18eab9c564d36d075e355de43 | Triage

Analysis

max time kernel
1774s
max time network
1587s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2022 20:20

Sharing

Report Analysis Logs

General

Target

langs/SimpChinese.ini
Size

86KB
MD5

7aad044a68d89d8bb5a202f8bc69d87c
SHA1

e20ca69d6f4d1612dc4457612a4b5e4808470bf3
SHA256

1bfa864f7012e64f5c1656fc5636ea29e87e2a45b5eb2c31a3b20643fdd8ad4d
SHA512

1fe22968bcba141229d8a4d36f8a7d300e44e76ea701d6a07430854567d15c8b8ebaaacb646d038a89273414c5b2a48562407ca31ac9c75e1e22fece73686625
SSDEEP

1536:SXm7cLrzWFubvgkOvAbGCgjhRrERD+0xs3sqPHGUt471J2BZIn:8FKNPHGVt

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2084	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\langs\SimpChinese.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads