f8fac5b3d38d4d2589c6a4ef9d9c10a89250e84bea37adde055b0426e7b11167 | Triage

Analysis

max time kernel
118s
max time network
140s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13-10-2023 19:53

Sharing

Report Analysis Logs

General

Target

README.txt
Size

242B
MD5

8faf6a1f3d665ff7ab56c738bdf38cbe
SHA1

4e89452ad6d6af46ab9b94b19e8e2586e0305a41
SHA256

8a3a30725dace1324cb29ef63a8cfb4246475dabc6b8e1d33e9741eab10fd284
SHA512

a31e0e63a11a115923fd555e6f4f469f15e5967b1892eb1c15b5a66b33298f8f8e504dfcbcd505b0cd1c208e08ec18f36bd76f04a27ecb0fd424d6293ac711aa

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2932	NOTEPAD.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2932	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\README.txt
1⤵
- Opens file in notepad (likely ransom note)
- Suspicious use of FindShellTrayWindow
PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads