Analysis

  • max time kernel
    74s
  • max time network
    85s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    11/02/2024, 12:21

General

  • Target

    public/steambootstrapper_german.txt

  • Size

    4KB

  • MD5

    395286db3e67a59868e2662c326c541a

  • SHA1

    716014d76622612a1bde2d4e1744d024f6d0b830

  • SHA256

    02e48ee4e10354a2b2741d2e57ef565404753779f847906b5ae5c98ede06c01b

  • SHA512

    64cdf1e6701ea57474051e338eee74859fc0ff4acd71ee0718a9b8cd698e94a9793c1901b6791fc0fc268c53fbc1e7e2f94ac1024f3f8765bf713954c194b0fe

  • SSDEEP

    96:hn6e0CBtWTeRBtWTkcBMBcVRZY13nSYzBPCN0Ky5zaxhlwG/Iq8N8S32IBa3DOoo:h6erBtWqBtWDBMBcVrYF7GvFANv4D38f

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_german.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:4580

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads