Overview

overview

10

Static

static

3

#!NewFiile...�s.zip

windows10-2004-x64

1

Language/an.txt

windows10-2004-x64

1

Language/ar.txt

windows10-2004-x64

1

Language/az.txt

windows10-2004-x64

1

Language/be.txt

windows10-2004-x64

1

Language/bn.txt

windows10-2004-x64

1

Language/co.txt

windows10-2004-x64

1

Language/da.txt

windows10-2004-x64

1

Language/el.txt

windows10-2004-x64

1

Language/es.txt

windows10-2004-x64

1

Language/eu.txt

windows10-2004-x64

1

Language/fa.txt

windows10-2004-x64

1

Language/fr.txt

windows10-2004-x64

1

Language/fy.txt

windows10-2004-x64

1

Language/gl.txt

windows10-2004-x64

1

Language/he.pak

windows10-2004-x64

3

Language/hi.pak

windows10-2004-x64

3

Language/hr.pak

windows10-2004-x64

3

Language/hu.pak

windows10-2004-x64

3

Language/hy.txt

windows10-2004-x64

1

Language/is.txt

windows10-2004-x64

1

Language/ja.txt

windows10-2004-x64

1

Language/kaa.txt

windows10-2004-x64

1

Language/kk.txt

windows10-2004-x64

1

Language/ku-ckb.txt

windows10-2004-x64

1

Language/lij.txt

windows10-2004-x64

1

Language/mk.txt

windows10-2004-x64

1

Language/mng.txt

windows10-2004-x64

1

Setup.exe

windows10-2004-x64

10

en-US/Auto...eN.dll

windows10-2004-x64

1

en-US/avicap32.dll

windows10-2004-x64

1

vcruntime140.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-05-2024 18:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Language/ar.txt

  • Size

    12KB

  • MD5

    1c45e6a6ecb3b71a7316c466b6a77c1c

  • SHA1

    04bf837911fa31ffca8e034158714b47f6489d38

  • SHA256

    972261b53289de2bd8a65e787a6e7cd6defc2b5f7e344128f2fe0492ed30ccf1

  • SHA512

    5358bb2346c9f23318492b5e7d208e37a703c70d62014426eadd2dd8cda0b91c9d9c2a62eafe0137faefb38bf727fd4d5d8dc18394784ccae75ae9550558e193

  • SSDEEP

    384:7+CIwRJQh3hY4+6TRxAFqpdQbCs7ZpN4QyRl3fcxMZXj4V/2QT:LJi3K4+60Fqpd8Cs7ZpNryRl3fcxMZX6

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Language\ar.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads