Overview

overview

10

Static

static

3

FACTURA_240001920.zip

windows7-x64

7

FACTURA_240001920.zip

windows10-2004-x64

1

document.exe

windows7-x64

3

document.exe

windows10-2004-x64

10

Acclimate.dec

windows7-x64

3

Acclimate.dec

windows10-2004-x64

3

Ergometere...ks.txt

windows7-x64

1

Ergometere...ks.txt

windows10-2004-x64

1

Myomectomy.und

windows7-x64

3

Myomectomy.und

windows10-2004-x64

3

Unlearnabi...ng.tyr

windows7-x64

3

Unlearnabi...ng.tyr

windows10-2004-x64

3

Unlearnabi...ae.for

windows7-x64

3

Unlearnabi...ae.for

windows10-2004-x64

3

bayrernes.afv

windows7-x64

3

bayrernes.afv

windows10-2004-x64

3

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14-11-2024 10:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Ergometerets/marks.txt

  • Size

    642B

  • MD5

    045784ae6140b6244ad605a99a3ab908

  • SHA1

    a7f43f2ac40159500446056db1c4c1d78f0c077d

  • SHA256

    667a103a45337560380e63659aad2bbbdffd0ad9adfbcbc9e771fa0a62cb8a4d

  • SHA512

    1bb0882e7bf868753154ad0037bc7476484743b3755bc148e372a84c9ea82f683dfa669fcb0383b9705678ebe478e20c6d51fee572e5c9b5cf08b0957789b525

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Ergometerets\marks.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads