21249bb0ad8b3391ebc28b1817037326c18f5b3d566e8a59de8f0d2d6202a6b7 | Triage

Analysis

max time kernel
61s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
28-01-2023 12:36

Sharing

Report Analysis Logs

General

Target

ReadMe.txt
Size

238B
MD5

508b9daf85bd9739defc002db3932362
SHA1

94534c44e406397c132c145e5cbaa23fdbb575b8
SHA256

7ecd35b2388c8d8cb006427b0661ae5241ce4cdef4890f2a6be9896b173d407d
SHA512

7ed8bcaa754f4455eb79c690b1030657751139ab34743a27057966c9c0858a574180e485927192fb88399f25a2ba715b6716cc8041dfa6e72b10cbac314951a6

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

2584 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\ReadMe.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...