3b616cb0beaacffb53884b5ba0453312d2577db598d2a877a3b251125fb281a1 | Triage

Analysis

max time kernel
71s
max time network
80s
platform
windows10-1703_x64
resource
win10-20231215-en
resource tags

arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
submitted
11-02-2024 12:21

Sharing

Report Analysis Logs

General

Target

public/steambootstrapper_polish.txt
Size

4KB
MD5

9b0b0e82f753cc115d87c7199885ad1b
SHA1

5743a4ab58684c1f154f84895d87f000b4e98021
SHA256

0bdeee9fa28d54d384e06ea646fbcfe3f06698a31dfdc1a50703ffe83ad78d32
SHA512

b7780b82fbe705bc8e5a527c011eb685c99ef0b2eb810617b9f82b891341af95ef1c2f46dce9e458c0c4dcc3e7a0d21db6c77f03419cd1c4b521a9b72f9017df
SSDEEP

96:Wa2CgROcEhwYRZYXvs9zp6SjluImGIljIjXOo89p8FR:X1wVEhwYrYQoI4fOD3838FR

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3148	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_polish.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads