Analysis
-
max time kernel
140s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
16-07-2023 13:27
Static task
static1
Behavioral task
behavioral1
Sample
whar.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
whar.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Discord.AIO.exe
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
Discord.AIO.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
webhook.txt
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
webhook.txt
Resource
win10v2004-20230703-en
General
-
Target
webhook.txt
-
Size
121B
-
MD5
708baa6bc58100411cbbf1d81a5cbb8c
-
SHA1
8bd67ffc16e264e4565216cb292169b947a45be4
-
SHA256
b61bafeb0f7306246bf2923f3cb18ea103eb66ca195944ad43f0b188c0153538
-
SHA512
aed11c3c2493c35260157146d2e7e57ff5b409c11b31741040297b8c9050de3cfadd964b72b90a518c67391256aba25979ef45be10668e68544fcc0f5d25009f
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4716 NOTEPAD.EXE