Analysis
-
max time kernel
437s -
max time network
442s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
22-07-2023 14:38
Static task
static1
Behavioral task
behavioral1
Sample
Wind0s7loader_v4.6627pass_543210.zip
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Wind0s7loader_v4.6627pass_543210.zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
password_is_543210.txt
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
password_is_543210.txt
Resource
win10v2004-20230703-en
General
-
Target
password_is_543210.txt
-
Size
20B
-
MD5
9e66041f1b1209ba469c7aaf6c34a722
-
SHA1
324459dd7af6ac924a36e79fef0e5655697daa8a
-
SHA256
1fbcc01b44e4da7811a82b96c8030a2a746f08c0fb1ae9bdfb17fcb0f195abbf
-
SHA512
79281bc677a3d07cf8b5c2e47ab62146f445d2eb5ee50e151a8f59c7aca00fcbc83610359ef5a8f6e9df9db87759a697aee0c87992b32dc4b077a905fb6e8ab5
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3844 NOTEPAD.EXE