Analysis
-
max time kernel
138s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
16-10-2024 22:50
General
-
Target
TypeSupport/Unicode/Mappings/Mac/CORPCHAR.txt
-
Size
18KB
-
MD5
0fbad8e1c335ac42617936aa6f89ec89
-
SHA1
02ba453abfbe24b25c35a2d75c6134714b3d7d43
-
SHA256
83246b8c942cbacf1031445a99e62acbb4733ef4167bebfba2bd852869824eab
-
SHA512
ab9e0bb4cae4c72cbccf7d061f1f181dc86277e8e59424802422c6641bec864d3e87b2261d56cb7991e3f60c5c6f56a814073f7d180745b8499c05c39f93842a
-
SSDEEP
384:+aT8iQfVsEByru8n1ePc1RJ1lX1HEvSZ3:dIqEc/X1kvSZ3
Score
3/10
Malware Config
Signatures
-
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
-
Opens file in notepad (likely ransom note) 1 IoCs
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.txt1⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Opens file in notepad (likely ransom note)