0cb8404062b04549b8b8ad5a6b27aeba1a001b0d602c79f196cc16fbd427aa0d | Triage

Analysis

max time kernel
29s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
08/01/2023, 05:11

Sharing

Report Analysis Logs

General

Target

Korean.ini
Size

150B
MD5

2c3602cf7bcbe10e754ffd2b2519ae0e
SHA1

8238e7da7cdce53995eb0b7b65a08ea70cdf240a
SHA256

2bb481ad18d1a7767e2a9f0ca349a74155c58213aab343276ecc425c985532ec
SHA512

4fd8f60f1b4dab090d704aa1905b8a366b74b86df593e461c4a1d8bce4f89e9ecb5a7a961397b8910c6c530ce6c0542f3ed0655db73103cdeddfcccb3db07d7d

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1164	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Korean.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1164

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1164-54-0x000007FEFC311000-0x000007FEFC313000-memory.dmp

Filesize
8KB

Download