0cb8404062b04549b8b8ad5a6b27aeba1a001b0d602c79f196cc16fbd427aa0d | Triage

Analysis

max time kernel
26s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
08-01-2023 05:11

Sharing

Report Analysis Logs

General

Target

English.ini
Size

182B
MD5

df810ea5c667c5e649bd9b259eeb4fbf
SHA1

2d3d5cb9750d7e137d5d1364fc2e977d10271699
SHA256

1b2f01c62e4b5b32358c795bbb217e8b1f573ef58522f8157866a2c2b448d065
SHA512

439322b96d2be0a59d5b20bff3e1ea03cc7b50136d684be10bbc4d30ad0401612992aa5321fc9dac364b819039ec21aadc804daca6b54a7d2a72ace739f71128

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1504	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\English.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1504-54-0x000007FEFBA41000-0x000007FEFBA43000-memory.dmp

Filesize
8KB

Download