aa5b7b6ffd4b55a0dd00296a4112bbbc4e3fbc8ee6b9f11d2f1751b55d5a15bf | Triage

Analysis

max time kernel
28s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
28-12-2022 05:29

Sharing

Report Analysis Logs

General

Target

PayInfo/Information.txt
Size

31KB
MD5

1636effac8adee5f2f0849ae2a5525f0
SHA1

9ce8b46dede2cd15d7c3e8567a2b3b5ade8e153e
SHA256

0b8559590032f1f4fece904ad0bf088bf7a003380d5f2e6a56063cd7dd618d1b
SHA512

e2aa0f04c81dd4e0f343d1fe3a6fc58458d194d1af08b7369517528eae1c045692a010995fc6adef4b840a6c57cf97e12807654933295aa3aca8a432a7327e1f
SSDEEP

768:kUeIgIgIHtBIgIWAIgINImaIPI2PfIZV5I9FI6ID0VDI92IIJlIITIOP0IsIqyIW:J

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1704 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\PayInfo\Information.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1704

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1704-54-0x000007FEFC4E1000-0x000007FEFC4E3000-memory.dmp

Filesize
8KB

Download