7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb

Analysis

max time kernel
1561s
max time network
1562s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
29-05-2024 19:57

Target

public/steambootstrapper_bulgarian.txt
Size

6KB
MD5

4c81277a127e3d65fb5065f518ffe9c2
SHA1

253264b9b56e5bac0714d5be6cade09ae74c2a3a
SHA256

76a6bd74194efd819d33802decdfddaae893069d7000e44944dda05022cfa6d9
SHA512

be077b61f3b6d56a1f4d24957deaf18d2dff699bda6569604aac4f1edb57c3cfd0abc5e2a67809f72e31a90b4aed0813536c153886da2099376964c60e56001a
SSDEEP

192:sKVp+typPx7rYLxGnyVqY8WYw6i0KfBKKfg38m8i/:sKVpiqMLxGnyVq/YEWYWg38m8G

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2168	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_bulgarian.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2168