Overview

overview

1

Static

static

1

strings.txt

windows7-x64

1

strings.txt

windows10-2004-x64

1

Analysis

  • max time kernel
    135s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/06/2023, 18:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    strings.txt

  • Size

    215KB

  • MD5

    cc2c83b6fc5ec84c8afc9373db97f26d

  • SHA1

    16877c74205fa6910b02e65c13ecccbe224b54d2

  • SHA256

    08642e88ccb2f98d29cf0dc9805ab1ac5085fe728c634c89b80567cd20ecc688

  • SHA512

    54a979c5f39808763e2955a9c1ca7ece00d2f8d7ff4a7f61a9d21571bdc913ba906a17093f3a9e1ec122b9dbbd74a3015a2a44fbc64e35c295a638fa3598b277

  • SSDEEP

    3072:/mD6DOQRspgfrVa65QTEBto67i111UtBAVEOr/jjk2i9O9m111+FBVfsNLdLCCrg:/mFUnQePOHQMo74R

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\strings.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:3756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads