Analysis

  • max time kernel
    31s
  • max time network
    32s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    11/02/2024, 12:21

General

  • Target

    public/steambootstrapper_bulgarian.txt

  • Size

    6KB

  • MD5

    239c03a3dc1c27993da724736d086cef

  • SHA1

    ff88246f8ea3502873dcbdc622378f006c58a2e6

  • SHA256

    b387e2fb971297d3438acca130c53dfdd202ae2ca5b52d6503333734cda4fbfc

  • SHA512

    656922e8f2dec46ef36efba5c85088c47b02e89f62b27559611fcbe6ef85c6cd8462a4532e2d2d7f4faa977ab24f0de6f5f72e3075f8889db9e6e60baa162a32

  • SSDEEP

    192:sK8p+typPx7rYLxGnyVUY8WYw6i0KfBKKfg38m8i/:sK8piqMLxGnyVU/YEWYWg38m8G

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_bulgarian.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:3932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads