Overview
overview
7Static
static
1Hitman-3-W...en.exe
windows7-x64
6Hitman-3-W...en.exe
windows10-2004-x64
4$PLUGINSDI...er.bmp
windows7-x64
3$PLUGINSDI...er.bmp
windows10-2004-x64
7$PLUGINSDI...rd.bmp
windows7-x64
3$PLUGINSDI...rd.bmp
windows10-2004-x64
7public/ste...an.txt
windows7-x64
1public/ste...an.txt
windows10-2004-x64
1public/ste...an.txt
windows7-x64
1public/ste...an.txt
windows10-2004-x64
1public/ste...ch.txt
windows7-x64
1public/ste...ch.txt
windows10-2004-x64
1public/ste...sh.txt
windows7-x64
1public/ste...sh.txt
windows10-2004-x64
1public/ste...ch.txt
windows7-x64
1public/ste...ch.txt
windows10-2004-x64
1public/ste...sh.txt
windows7-x64
1public/ste...sh.txt
windows10-2004-x64
1public/ste...sh.txt
windows7-x64
1public/ste...sh.txt
windows10-2004-x64
1public/ste...ch.txt
windows7-x64
1public/ste...ch.txt
windows10-2004-x64
1public/ste...an.txt
windows7-x64
1public/ste...an.txt
windows10-2004-x64
1public/ste...ek.txt
windows7-x64
1public/ste...ek.txt
windows10-2004-x64
1public/ste...an.txt
windows7-x64
1public/ste...an.txt
windows10-2004-x64
1public/ste...an.txt
windows7-x64
1public/ste...an.txt
windows10-2004-x64
1public/ste...an.txt
windows7-x64
1public/ste...an.txt
windows10-2004-x64
1Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14/08/2024, 19:04
Static task
static1
Behavioral task
behavioral1
Sample
Hitman-3-Windows-3-170-en.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Hitman-3-Windows-3-170-en.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/modern-header.bmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
public/steambootstrapper_brazilian.txt
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
public/steambootstrapper_brazilian.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
public/steambootstrapper_bulgarian.txt
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
public/steambootstrapper_bulgarian.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
public/steambootstrapper_czech.txt
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
public/steambootstrapper_czech.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
public/steambootstrapper_danish.txt
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
public/steambootstrapper_danish.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
public/steambootstrapper_dutch.txt
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
public/steambootstrapper_dutch.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
public/steambootstrapper_english.txt
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
public/steambootstrapper_english.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
public/steambootstrapper_finnish.txt
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
public/steambootstrapper_finnish.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
public/steambootstrapper_french.txt
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
public/steambootstrapper_french.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
public/steambootstrapper_german.txt
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
public/steambootstrapper_german.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
public/steambootstrapper_greek.txt
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
public/steambootstrapper_greek.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
public/steambootstrapper_hungarian.txt
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
public/steambootstrapper_hungarian.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
public/steambootstrapper_indonesian.txt
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
public/steambootstrapper_indonesian.txt
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
public/steambootstrapper_italian.txt
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
public/steambootstrapper_italian.txt
Resource
win10v2004-20240802-en
General
-
Target
public/steambootstrapper_dutch.txt
-
Size
4KB
-
MD5
31a29061e51e245f74bb26d103c666ad
-
SHA1
271e26240db3ba0dcffc10866ccfcfa1c33cf1cc
-
SHA256
56c8a86fa95eab0d8f34f498e079b5516b96d2a2f1ad9c2a888555e50e47f192
-
SHA512
f85865c1e9ab45e5586d3dd2b45d15265193e8a3c34b6bb1ac7e415a1ea878cfb044e8e01012e917e4f00bb9e0a422f56253f328df1bac99a145e19433354cf8
-
SSDEEP
96:TnsaIWCk1TXfSRkAcXJNRZY/r/iza1GUNrzRxbM4x9yJs+Xc1AZqI79qIjiOo8nl:LsaIVATvycZNrY/KQyJs+ZZz79zji38l
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 1712 NOTEPAD.EXE