3b616cb0beaacffb53884b5ba0453312d2577db598d2a877a3b251125fb281a1

Analysis

max time kernel
73s
max time network
82s
platform
windows10-1703_x64
resource
win10-20231215-en
resource tags

arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
submitted
11/02/2024, 12:21

Target

public/steambootstrapper_korean.txt
Size

4KB
MD5

d75580775d67a85353189736222a8878
SHA1

ccb2275c8f5d119640064fd533ca15f30d93f331
SHA256

10720923c1048502c5191d6d1d8580e35e707b24d457941dae94a87371af989a
SHA512

757dd94a1e3debb2520855a3d00e44e3a98b5764caf9c16c8d088fc1a1f1024eed742f1051635721f4bf2c00d1dac11fd975c09a7f5df78d1863de88f9bbf9fe
SSDEEP

96:bno0CtiVRtncgzjthtF5NdLRZYyzzjBaz23//w2Dv3R8QtVSMfXIjNXIPemiOo8U:zorkv+gnRFTtrYxUXLLB8Q2Oq3838gpq

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
220	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_korean.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:220