5d8d697707c89466cfe203bde7e242680d020646bd5e49edaabd67fc6a7d6321

Analysis

max time kernel
136s
max time network
109s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/08/2024, 19:04

Target

public/steambootstrapper_finnish.txt
Size

4KB
MD5

594be5b10d9f551e551cf20eae0e6dfc
SHA1

191c20f5cb0c27ecc5a055fa2379694f5e27a610
SHA256

e350ca62e777da4da6d25885be96d48e7ce3acf021a74f2a4902354a1bf03fbb
SHA512

e27bf6593a177c22e16ddf5a44d82b34b02063645a7fd63943b936028d9c433c89628038768a300c296c2d3bcab2ef6b8532a19f7283952d041865c704f62b0b
SSDEEP

96:OJCZC1RCSwhp1RZY/T4zcVYsspWIN71BIxZvaZIUZvaPOo828jbG:JkPwhp1rY/Ucx0ALbYi3828jK

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3492	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_finnish.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3492