1120384cb197413e7a81b25c51f2b8c6ee3ff49c5260579d2e8ea36d7ffd03d4 | Triage

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
09-06-2023 23:44

Sharing

Report Analysis Logs

General

Target

Exodus.codes/Exodus.codes.txt
Size

97B
MD5

79f4955083eb1cfd102180bf9a140630
SHA1

2c0ba7366c5d131853d0f54871a837615e739a64
SHA256

028920942f81a61edd10b69b0cf00533472df220c0ec3825357c870cccfb710d
SHA512

6efdfc0b2fafcc1b52999b79f551ffbdd33bfd48aebbb09e386fda05dd506310e1fb2fc3e7b703004af177e89fb7556ef81c862ce89095a66ef5143a63d4ef53

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

3244 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Exodus.codes\Exodus.codes.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...