83f6d9721abac7afdb48fad8a0430fcbb6cb4c1de28e37a0768d92cf8e7c8cda | Triage

Resubmissions

30-07-2023 09:27

230730-les4qsgg49 10

29-07-2023 12:31

230729-pp9q1scg28 10

Analysis

max time kernel
241s
max time network
269s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
29-07-2023 12:31

Sharing

Report Analysis Logs

General

Target

FillInfoFile.txt
Size

465KB
MD5

ea5cd079095cee4c7e15a271d4b269d0
SHA1

ea1be6a90782c5de4348dba51f51e7c7dd35e8a4
SHA256

772b2c2d82d7e8b73c0b3b94fea283566eec241b98f802d71f5c6443fa96b75e
SHA512

699cede8419ef277794ae06f031621798816932cd463e230b9fd172f8ffaea2ff353beec2336bf8fac915adde2f1d75ac4569847e6423953d38d877735286df3
SSDEEP

192:gRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRI:n

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs
ransomware

Processes:

NOTEPAD.EXE

pid process

1176 NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\FillInfoFile.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...