2b233c918dd8dadbbd881bd8b09e2792a3fbf01a71aa28db201d58942ea43731

Analysis

max time kernel
71s
max time network
128s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
11-06-2023 20:34

Target

UNIVERSOCRAFT_DATABASE_.txt
Size

41.8MB
MD5

d642886a330a554ed132d50292181fe7
SHA1

384ded97b0edc43bea10fbd351d59faa6c5ede50
SHA256

2b233c918dd8dadbbd881bd8b09e2792a3fbf01a71aa28db201d58942ea43731
SHA512

b66d66a9a7c770c0861f3cacf48d96e9168607e3ecb1693907882e5e150d2ab5eaef709b53acc259e1550579a1c2f122332efab42b2b689bb2cea92d42f982b1
SSDEEP

49152:/SMCSyZLZMLF3fesg0TNIAtpzxjz4oJi1h10f7KANvl4oJgGi1h4c+oZhCCD5cXI:F712B5C+IVz08gO10eWZiuz

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

2652 NOTEPAD.EXE

pid	process
2652	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\UNIVERSOCRAFT_DATABASE_.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2652