3b616cb0beaacffb53884b5ba0453312d2577db598d2a877a3b251125fb281a1

Analysis

max time kernel
74s
max time network
76s
platform
windows10-1703_x64
resource
win10-20231220-en
resource tags

arch:x64arch:x86image:win10-20231220-enlocale:en-usos:windows10-1703-x64system
submitted
11/02/2024, 12:21

Target

public/steambootstrapper_schinese.txt
Size

4KB
MD5

56dcf7b68f70826262a6ffaffe6b1c49
SHA1

12e4272ba0e4eabc610670cdc6941f942da1eb6a
SHA256

948cad1bb27109e008f2457248880c759d3fa98b92c5b4033b94f455cb8ac43f
SHA512

c3fd9caf0bd4c303a7cc300faada9cfe6dd752e82d67625b31f4c0c2c091596508bb477fe19f758fdf79b25b8ac3f5320a8785d2b6705b9bcc28a054a59454e2
SSDEEP

96:/BAGpCOREHce3QuRZY7yezuqY2v14q3HPG9AHINL4QI04VOo8a8Jz:Sr+re3QurY7XfHPgNL4d04V38a8Jz

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3008	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_schinese.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3008