aa5889a3857f90179a40a1c61635c43f0d7133d18eab9c564d36d075e355de43

Analysis

max time kernel
403s
max time network
412s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2022 20:20

Target

langs/Hebrew.ini
Size

97KB
MD5

dbf6973ac46a0adcae8500a16cce4e48
SHA1

eae986788b33ad048f08ba722fd4eb7354212e63
SHA256

42ba655e5b635698995a588f4dd39147be867a0c4b45fd49edc65982b12b9531
SHA512

7a59fe15ac9c10caf3b3abed60201f008583684dfa476cbb9f8ad4c3f5e93d34f31dec859019f1f36d92129b2298272df5eec15be59e367cdcb77d5e89b46549
SSDEEP

768:w2kJwh+FrSb7UJTvsjkhsRGn6PqwKJTDv69ZUtiGn5Eq5lBQAjV8WEdtWfSZu/JR:zkJwh+FrScvs6Eq5uWpfSZ6KlThAd+C

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2092	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\langs\Hebrew.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:2092