52c6bd1d800582309ae4fbdd99a1d45c86e04f7cd482887d947eb6a5a7a01b22 | Triage

Analysis

max time kernel
91s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
04-04-2023 09:04

Sharing

Report Analysis Logs

General

Target

nskbfltr.inf
Size

328B
MD5

26e28c01461f7e65c402bdf09923d435
SHA1

1d9b5cfcc30436112a7e31d5e4624f52e845c573
SHA256

d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368
SHA512

c30ec66fecb0a41e91a31804be3a8b6047fc3789306adc106c723b3e5b166127766670c7da38d77d3694d99a8cddb26bc266ee21dba60a148cdf4d6ee10d27d7

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

2484 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\nskbfltr.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:2484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...