21249bb0ad8b3391ebc28b1817037326c18f5b3d566e8a59de8f0d2d6202a6b7 | Triage

Analysis

max time kernel
28s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
28-01-2023 12:36

Sharing

Report Analysis Logs

General

Target

ReadMe.txt
Size

238B
MD5

508b9daf85bd9739defc002db3932362
SHA1

94534c44e406397c132c145e5cbaa23fdbb575b8
SHA256

7ecd35b2388c8d8cb006427b0661ae5241ce4cdef4890f2a6be9896b173d407d
SHA512

7ed8bcaa754f4455eb79c690b1030657751139ab34743a27057966c9c0858a574180e485927192fb88399f25a2ba715b6716cc8041dfa6e72b10cbac314951a6

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

840 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\ReadMe.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:840

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/840-54-0x000007FEFC4B1000-0x000007FEFC4B3000-memory.dmp

Filesize
8KB

Download