abcd458d20f7a902794b58d130de3dc4036a44f2eab26a53c5bb04b15afc6903 | Triage

Analysis

max time kernel
27s
max time network
30s
platform
windows7_x64
resource
win7-20230220-es
resource tags

arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows
submitted
18-05-2023 17:22

Sharing

Report Analysis Logs

General

Target

Password.txt
Size

18B
MD5

c44669219a77bcb6e04ccc9a7dc8905b
SHA1

cc10be56e2a5415ed3ed286734bee8f0741d92bd
SHA256

8406e6d1a644f797995907ec0a18d8104d1e8c5ffac8f4f874c11e5d92aff969
SHA512

2ea589c6612eaae6fdc3613df8438df4df92c76e39ba527f07477635d8e86ad4d473c941b77cadd3195cba4296ed3eb5d1f57c5b100279617b6a3399d880fbe2

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

864 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Password.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:864

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...