899d345b60568f489eb7cc81097bad6fd859f9fe0b6be2d558acbe87cc883dd4 | Triage

Analysis

max time kernel
254s
max time network
262s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
08/02/2023, 21:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

PR19VG/Instrucciones.txt
Size

408B
MD5

54d1e69a2b24e3f73139670fb4216164
SHA1

286f7785e8d6d1edc368ac254a5fc3d08a14b338
SHA256

dbfedf669e5396f6bf569afa2fbe6e61661741a5e896a4a9c7d6d34a61b384a4
SHA512

2c7c538277826004f46ed4d09ec1f80ed427412504944c20fb73a02f45f81c1c5815ee0ff78d29371e2780cee54187c6d8db55820a2f97122ab1058c81924379

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
668	1400	WerFault.exe	84

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3988	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\PR19VG\Instrucciones.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3988

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 484 -p 1400 -ip 1400
1⤵
PID:3640

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1400 -s 1756
1⤵
- Program crash
PID:668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads