0cb8404062b04549b8b8ad5a6b27aeba1a001b0d602c79f196cc16fbd427aa0d | Triage

Analysis

max time kernel
43s
max time network
48s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
08-01-2023 05:11

Sharing

Report Analysis Logs

General

Target

Russian.ini
Size

194B
MD5

071d013a884e4ff88f3031ff738e9d87
SHA1

13278ae08231c8fac7cd2aa4e2600a42e41973ef
SHA256

f47b3eee8df6632ae0174e908946cfaa8c0b2e1d59b24692770280d8c07c5cb8
SHA512

34aa40756b03f9dafa6f82487dfdcb5f176bb1c7a9ff7e1c6153cc4f689f6e376ebf5430e8f18ac9745367efce0a7704cce75c0898ca72b94a0a0ab9bf836cdb

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1280	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Russian.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1280-54-0x000007FEFB9E1000-0x000007FEFB9E3000-memory.dmp

Filesize
8KB

Download