Analysis
-
max time kernel
108s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20230621-en -
resource tags
arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system -
submitted
27/06/2023, 13:42
Static task
static1
Behavioral task
behavioral1
Sample
1.txt
Resource
win7-20230621-en
General
-
Target
1.txt
-
Size
46B
-
MD5
708532fe2826f6111f20bf60281b2096
-
SHA1
08505f9daee8f07a12f7ae849025e93dd4bfa3d5
-
SHA256
f4bf7fa09b22b36beaf2abe616919d1a4251a2b5e5344b8a540795a02010a188
-
SHA512
b07ebc3cd61dcaf4c756522857e3c73c1d74b3ea59c6a33728c3fc0b800c3219986a0bcade310e041e4e8e001a6e9130f887b2f409eb49f0c6b18f81d44a6685
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1320 NOTEPAD.EXE
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\1.txt1⤵
- Opens file in notepad (likely ransom note)
PID:1320
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef65b9758,0x7fef65b9768,0x7fef65b97781⤵PID:872
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1132 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:21⤵PID:1060
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1524 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:81⤵PID:752
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1648 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:81⤵PID:1544
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --mojo-platform-channel-handle=2244 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:11⤵PID:1708
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=2304 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:11⤵PID:1808
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:1148
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1560 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:21⤵PID:2064
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --mojo-platform-channel-handle=1124 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:11⤵PID:2132
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3920 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:81⤵PID:2208
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3928 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:81⤵PID:2216
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=11 --mojo-platform-channel-handle=3992 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:11⤵PID:2304
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --mojo-platform-channel-handle=4288 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:11⤵PID:2376
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --mojo-platform-channel-handle=3980 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:11⤵PID:2444
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --mojo-platform-channel-handle=2476 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:11⤵PID:2560
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2360 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:81⤵PID:2620
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1124 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:81⤵PID:2700
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3836 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:81⤵PID:2692
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=2300 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:11⤵PID:2776
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --mojo-platform-channel-handle=3180 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:11⤵PID:2972
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3624 --field-trial-handle=1272,i,8716662752731774767,11275375945016006947,131072 /prefetch:81⤵PID:2264
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD52f7fdc4c2e3a5f9003a3a231bdb24359
SHA1b4339e5f29a6ebf0b0b0dc0ffa41b4af3ceb9cef
SHA2568789d1096d8b84d15dc012b348e8a150bd81ac59dfa36a44875183ccb403e8a6
SHA5124a355062b586f9de62f67f9cd6cd47e57c4007e2147b5c6270c6263a4632ce2c7837917148e647de2ee9251ebeb952037d1e8e0479a907a725a0854b41cb44ee
-
Filesize
526B
MD5686369d2abd8dad56668b019ae5ab9f1
SHA10d45cb0539a6d6c1a468e78e661a614b5c15bbce
SHA2566582d570fe16b12ce4ad7510592e4d4b6325efe93429d3d835cadb1139bbfd0d
SHA512c7f2287daa4c0d04ecaf1f5818741ecac84107f009a6b951cb9bc6cf399f29f8d07e4ed622c32ef012f7af489af152be4d01086c8be7d8396642227a2c6c3e30
-
Filesize
526B
MD5d5abd6effc0e2733a16310f54abc8f3a
SHA109d5553c317969e057c6efb0da5a6867c7c4cd2b
SHA2566f66eac0add31358b19fe26b42d2ef6cf9a3b66307a2c8ab3fbe7a6b72286463
SHA5123f0db0e39562bf1bc2e6bdf41ad79486e01ce7aa4e427f3f2f7ff187d681bde0248ddacbed5e11bdcd95d9a8cb3122a0714c83c50f8e0135bd4599e6547e4ee0
-
Filesize
526B
MD552c929230f506555dace7b591f409bd7
SHA139169cd6e577b19a1742a159171a7a7dd2ff87bc
SHA256bda4d2f297361499b61235b91bb6bcd9a7baf84ad8360bd9432fc4f795d45501
SHA51242a70ee1c83987c406ce659ac9cb9fd6c1432c71d208020b404dd1f8734707b298f714530b4ceeac8845eeedd8c23d1e121723e66702365b2e049fcc6ab3a1e2
-
Filesize
526B
MD5af6124fb9f6079332f81beb0e72de9fd
SHA1da616edd696d07fe28c5181785c38b4d92ac9e9f
SHA256ce4c8cfffecb5f699cefd757c8ce137f0b5078a07c17884d2adf21171de320e2
SHA5124369149e2997b2eecc5d3477c51de4ae3226425736f8f4ee752ea0ec37651a4024e296c45dd4858b4d5f8a36ad790eadadf43eacd3b2584ac58ea721bec450ff
-
Filesize
526B
MD581864122f92f4be895305c0c1b24378e
SHA119c870a7d49d842ab00d4f59fc46ab0408c53ad9
SHA2567fcc5d3d24deb1edb86d482dba3abed3952766f5a7f7a695d10bca3929f610cd
SHA51221ab442d4ca35fcfca972d3d128541e364d9394fb3b374d76a6ace01cfd9b8664bba0ccbfe64229c525012ab6198dcf0aaccf0ec825bf5fa8adc7a7b72c3841b