3b616cb0beaacffb53884b5ba0453312d2577db598d2a877a3b251125fb281a1

Analysis

max time kernel
5s
max time network
9s
platform
windows10-1703_x64
resource
win10-20231215-en
resource tags

arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
submitted
11/02/2024, 12:21

Target

public/steambootstrapper_turkish.txt
Size

4KB
MD5

29f9a5ab4adfae371bf980b82de2cb57
SHA1

6f7ef52a09b99868dd7230f513630ffe473eddf8
SHA256

711675edb20b3cb70acf6cf75f2eea8e0d87c8ace3e11c8df362b4517427a34f
SHA512

543fe63f791250e05e8fda24fd2ceadebb4c8925e8927de49ae490895c87eed3e61a9ad50237532649f99fe3165836261de215ee3f66ffbfc6d677ddeea7732a
SSDEEP

96:xnkgCvLRzchBmRZY6PfwEGcyDQz32cgRc1PqX0pVmbIN0P1bINuOo888SM:Rkv9ohBmrY68A3eXWRYSk3888SM

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4408	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_turkish.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4408