ba0f13322211b52802b5876273575b36f7b5623008b5ce6eaa535788cb3087cd | Triage

Analysis

max time kernel
147s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
15-03-2023 23:08

Sharing

Report Analysis Logs

General

Target

ReasonLabs/DNS/rsDwf.inf
Size

1KB
MD5

9db3732ead10161d3c2883160a7016e6
SHA1

417483dcb0eafadd2894037e5c8b6d636b83b946
SHA256

b31592fb0e84b1609f0ebb61b78a4fffefd481e3a1707a0170a2357d3de06350
SHA512

411b8d82e65199acbe878f6718b01ba2db6874b327c0be70f18d78a4a69ecbf89f3b9c34bc3436fdf10d9f16df933f7eabd7b976fecb15791cb1823b47651e85

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

2804 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\ReasonLabs\DNS\rsDwf.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...