634486d190c08c699382cf8b8e8f0c9e43786ad950983bed80ae82b6d30a0373 | Triage

Analysis

max time kernel
31s
max time network
33s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
09/01/2023, 08:15

Sharing

Report Analysis Logs

General

Target

SJE0707P.txt
Size

606B
MD5

cdaa370ddaf7c436e817197ab9ebfee8
SHA1

a2fac92796ed11fb7271723ffaf819d8199c3ae0
SHA256

634486d190c08c699382cf8b8e8f0c9e43786ad950983bed80ae82b6d30a0373
SHA512

bee0f2d3eb75722d5cb85ee42ccc9a8ca7f4759194c6eb9a38e63adab87a46fd93d423ec634d0c9bec85043cbda522c3ff6d0ca4f4ab614bfa503ce2bd747f16

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1252	NOTEPAD.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1252	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\SJE0707P.txt
1⤵
- Opens file in notepad (likely ransom note)
- Suspicious use of FindShellTrayWindow
PID:1252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1252-54-0x000007FEFC091000-0x000007FEFC093000-memory.dmp

Filesize
8KB

Download