7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb

Analysis

max time kernel
1565s
max time network
1566s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
29/05/2024, 19:57

Target

public/steambootstrapper_finnish.txt
Size

4KB
MD5

9e62fc923c65bfc3f40aaf6ec4fd1010
SHA1

8f76faff18bd64696683c2a7a04d16aac1ef7e61
SHA256

8ff0f3cbdf28102ff037b9cda90590e4b66e1e654b90f9aea2cd5364494d02b7
SHA512

c8ff15373b37e848e6239a82424569e77c82a5fc557d17e7d2ed1d0d2b2f7d026cc1e2bc98cb5ee945c02cfefb82803c23fa6a26f48ff0adcf762f94cd5dd035
SSDEEP

96:OJCZC1RCSwhp1RZY/T4zcVYssvWIN71BIxZvaZIUZvaPOo8K8jbG:JkPwhp1rY/UcV0ALbYi38K8jK

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1256	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_finnish.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1256