0dbc4b788f17c88ffb41b081c8a441c2943a3ca78ccb3d0ab5938040aaac83ca | Triage

Analysis

max time kernel
79s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
27/03/2023, 23:36

Sharing

Report Analysis Logs

General

Target

TOOLS/notepad_pp/change.log
Size

447B
MD5

ddc336ff6abf500ccfcf76e582c6fac7
SHA1

14a13507af1aa60390a62cb95adba340d4bb1e13
SHA256

7e5ce8864bbeb2faab7617c9c87ed26268ffeb67d624529d67cba968e6f8165f
SHA512

ddfe78b9b320d821aed573f306b18e1e508de12054a10757509f5228e6106a594998c4f08373abd47df47f41ffc8983333e9f8af31db45111e778c7f5d8ce69b

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1952	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\TOOLS\notepad_pp\change.log
1⤵
- Opens file in notepad (likely ransom note)
PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads