7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb | Triage

Analysis

max time kernel
1340s
max time network
1159s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 19:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

public/steambootstrapper_brazilian.txt
Size

4KB
MD5

0340d1a0bbdb8f3017d2326f4e351e0a
SHA1

90d078e9f732794db5b0ffeb781a1f2ed2966139
SHA256

0fcd7ae491b467858f2a8745c5ecdd55451399778c2119517ee686d1f264b544
SHA512

9d23e020875ed35825169a6542512ec2ffdb349472a12eb1e59ddc635e57c8fd65fa919873821e35c755aa7d027c9a62d3d0fa617340449d7b2c4cf8dd707e93
SSDEEP

96:3aArpYaRZ8hYzaAD25nDoVIPEPVIPErKOo8D85e:Gar8iRCNDVPXP738D85e

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2584	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_brazilian.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads