6413b835503a6c77f347a262f0ce18de15ea59608658aa8c2e51a3433ffe1624 | Triage

Resubmissions

15-01-2023 00:36

230115-aybg9abe6s 8

15-01-2023 00:11

230115-agp93sfe58 8

15-01-2023 00:06

230115-ad4y3abc3t 8

Analysis

max time kernel
26s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
15-01-2023 00:06

Sharing

Report Analysis Logs

General

Target

interium/settings/Golyb0u_No_Psalo/misc.ini
Size

1KB
MD5

9ac40aba114264eca1a5f8f7cc655ebb
SHA1

3c594cc3383d85c4eec7e4bc3cf3b6a8ab31df22
SHA256

8bc23d59b617fc9e2048ab47e24c95222e5e89bce23b4cadbdaddf9a85d80e9e
SHA512

2a8a433d15fd1103b2ee1305db08bfbc065e91d82b76e719ba681ae984bf7e7bda2e070fd3a801b18cd1974aa8389096180f16bffea876a9254a57172d895bef

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
952	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\interium\settings\Golyb0u_No_Psalo\misc.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/952-54-0x000007FEFBA81000-0x000007FEFBA83000-memory.dmp

Filesize
8KB

Download