5d8d697707c89466cfe203bde7e242680d020646bd5e49edaabd67fc6a7d6321

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/08/2024, 19:04

Target

public/steambootstrapper_czech.txt
Size

4KB
MD5

2158881817b9163bf0fd4724d549aed4
SHA1

c500f2e8f47a11129114ee4f19524aee8fecc502
SHA256

650a265dffdc5dc50200bb82d56f416a3a423eecc08c962cfd1ba2d40a1ff3f7
SHA512

f3594aad9d6c50254f690c903f078a5b7a58c33bd418abdad711ebb74cfbdb5564679593e08fb2d4378faaf4160d45e3d276ba1aa8a174ed77a5791bcac46f28
SSDEEP

96:20Az7xzQK8VzRZfVAxzPXRQjpqp/lSPxIjfiI7yOo8S8qQk:/Az9zozrdAZPXR6qOPOvO38S8qQk

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5100	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_czech.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5100