Resubmissions

21/04/2023, 18:11

230421-wslxpahc47 3

21/04/2023, 17:23

230421-vylnfaha68 3

21/04/2023, 17:21

230421-vxcddaha62 1

Analysis

  • max time kernel
    27s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2023, 17:23

General

  • Target

    ACMobile.UWP_3.13.9.0_Test/Add-AppDevPackage.resources/ru-RU/Add-AppDevPackage.psd1

  • Size

    10KB

  • MD5

    f6674e24593335eae4fbbc9673d91cae

  • SHA1

    caef3039fe449f0476fdd24e1ba89dbc6b008bf6

  • SHA256

    4ebb45bf0f90e0b7d3a386c5299c6335ad0e2b8524d3d741eb590c2bd032b297

  • SHA512

    309ac5e3c64e249d4b7709f510131c73c409f21d73c4dfdb11eba5d6c9e5719102f40ba36cfe9eecf0aa75c813f43376ee8bced7665e996651b5ba8ec4301276

  • SSDEEP

    96:Y8Q9VqOvoBvoF1STd0hxLUzFy3FCW5i9BW86wP4PC1oRC5FPc0u6i1HHXwt3PQKt:Y8QVlvUvhTscyV1QARCrti9hQ

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs

Processes

  • C:\Windows\System32\notepad.exe
    "C:\Windows\System32\notepad.exe" "C:\Users\Admin\AppData\Local\Temp\ACMobile.UWP_3.13.9.0_Test\Add-AppDevPackage.resources\ru-RU\Add-AppDevPackage.psd1"
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads