d3ac941ab8478e215af35976da2212f5ecb6d87de08b24efb37280b10db8b748 | Triage

Analysis

max time kernel
141s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
07-07-2023 19:29

Sharing

Report Analysis Logs

General

Target

changelog_es.txt
Size

71KB
MD5

4d65535b1a923cafd00771a975e2ec5c
SHA1

7d7996f1c47a4d20297fc55b407a7fb0d88a45d2
SHA256

3a3afd9fe2744f9ffa9f07b3c77d0cbe1377e032c2343d009e6c23945ecdb411
SHA512

8b8c13d7e79e917b6ff0e2f278b6ea9fc8d7e6a348fc875f79fe1a54216517ed82da5009ddde6666cc21d97887e9196e1b9d63494c4d6367bc86b6602b9992b2
SSDEEP

1536:Ys1ZcWJXl5zknV4CniWiBiAidvg8nQOg83yaytgoE:5cWJXXzuV4CiFYbdYhltgoE

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
824	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\changelog_es.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads