6413b835503a6c77f347a262f0ce18de15ea59608658aa8c2e51a3433ffe1624 | Triage

Resubmissions

15-01-2023 00:36

230115-aybg9abe6s 8

15-01-2023 00:11

230115-agp93sfe58 8

15-01-2023 00:06

230115-ad4y3abc3t 8

Analysis

max time kernel
30s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
15-01-2023 00:06

Sharing

Report Analysis Logs

General

Target

interium/settings/Golyb0u_SemiLegit/misc.ini
Size

942B
MD5

4f9d6107add9981db03b3edce4398880
SHA1

c52122934e0bfaad5fef481eee4f64a06e0672f1
SHA256

6dfa1243213c1b71c5c13a7d415d753c40746dec3c9c7dba82329f6e345365b8
SHA512

c074280fdd7a06ae6591b83364eb57133ac42ed52ba37042a423a6666e2dc14f5374887ca895f77a9be0f34a477e6913f25c0d9318b35703e3ea1744ba92336e

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1476	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\interium\settings\Golyb0u_SemiLegit\misc.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1476-54-0x000007FEFC101000-0x000007FEFC103000-memory.dmp

Filesize
8KB

Download