aa5889a3857f90179a40a1c61635c43f0d7133d18eab9c564d36d075e355de43 | Triage

Analysis

max time kernel
1446s
max time network
1234s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2022, 20:20

Sharing

Report Analysis Logs

General

Target

langs/Swedish.ini
Size

104KB
MD5

d0280eb9ebf7e5f9b91dc0e405bd7178
SHA1

e0425673213109f140f8f9b7474029a0326cdab4
SHA256

f1ee3b2de54ee588813a7dbffca7e7607bbb769c763cdf73ccd600e06346fe1d
SHA512

0102a9b215d169b5cad039bbf80ef9882ad6eea7933ccb47e6ac204451456c50baabaeca43dd477a36d2db3eda317f4d59979e5387e169fbedf1c13494dc87e2
SSDEEP

3072:lMgTj95UgiNg1TdyjQxx3Ho7wAM65CB9mptXse6/3/GbBJsXdFg9FNX:w

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1900	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\langs\Swedish.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads