aa5b7b6ffd4b55a0dd00296a4112bbbc4e3fbc8ee6b9f11d2f1751b55d5a15bf | Triage

Analysis

max time kernel
143s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
28-12-2022 05:29

Sharing

Report Analysis Logs

General

Target

PayInfo/Issues.txt
Size

249KB
MD5

bd67ff711ea540782a844f7afaf337f5
SHA1

6cce7eda992862b8ff891ebe30cb14dc0a0a42f0
SHA256

aa1f7deb10913889d9249723b3e592e64ceb94c6debaaebf6e408fe4e0bdd619
SHA512

c2b12f3eac2b7542e502f0ffd83ebf621a87a02015ce6295c1866b5f52092f59246c03728b6e3c84f5109f9c67aa97121ff22bbe5b8d79140417c3f1e04b1314
SSDEEP

768:47GtIw+ITrX9obI5BOIAIW9cIgIWLmS2I+h4V2OIWj7G2OAIo8jIhAIW8ISkwOID:3

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

2416 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\PayInfo\Issues.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...