3b616cb0beaacffb53884b5ba0453312d2577db598d2a877a3b251125fb281a1

Analysis

max time kernel
70s
max time network
79s
platform
windows10-1703_x64
resource
win10-20231215-en
resource tags

arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
submitted
11/02/2024, 12:21

Target

public/steambootstrapper_russian.txt
Size

6KB
MD5

e04ad6c236b6c61fc53e2cb57ced87e8
SHA1

e9d4846b7e6cc755ee14a5d3fa45ee7d3bf425a4
SHA256

08c775efa77c2a92d369f794882e467b6e2526e61bc7aa7724f48e174524502e
SHA512

0dfb7e6d811d649103499018f3d115c542fcaba420ceb69124a4d837fe162ce514e7be2040860c5ef5f9c01c961fa6eea8730606b73ec107d87597989b6fd331
SSDEEP

96:c5qCHRRc8sF+RZLqls1s1pzMDqAFoJFOTfNfKIik6IiVqOo868Crsk:GxS8sErWl+s1BFpg1Zh3868Crsk

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1288	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_russian.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1288