7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb

Analysis

max time kernel
1780s
max time network
1172s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 19:57

Target

public/steambootstrapper_french.txt
Size

4KB
MD5

10c429eb58b4274af6b6ef08f376d46c
SHA1

af1e049ddb9f875c609b0f9a38651fc1867b50d3
SHA256

a1f6ba57ee41e009d904905c0ce5e75a59ee6790e08542561303109e1faafa13
SHA512

d8760f61760bffd8671b727d386ae220e7e6e68829a01553cfd5eb60ef8bd1d7c1b25e7b17a6db5bd17ba6712ef44999726764459318e784843c73bc4facaf46
SSDEEP

96:vk3l1CEN8RLcSMWPrfwgXWRZDbUvzBT5H5MEkJJIbcYIbsgqOo83fy8WJv:sVIEug0ETrDsB0EkQbclbsgq38Py8WJv

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2308	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_french.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2308