Overview

overview

10

Static

static

9

Release.zip

windows7-x64

10

Release.zip

windows10-2004-x64

1

Bootstrapp...se.exe

windows7-x64

10

Bootstrapp...se.exe

windows10-2004-x64

10

Bootstrapp...fig.js

windows7-x64

3

Bootstrapp...fig.js

windows10-2004-x64

3

Bootstrapp...al.dll

windows7-x64

3

Bootstrapp...al.dll

windows10-2004-x64

3

Bootstrapp...ub.dll

windows7-x64

3

Bootstrapp...ub.dll

windows10-2004-x64

3

Bootstrapp...wp.dll

windows7-x64

3

Bootstrapp...wp.dll

windows10-2004-x64

3

README.txt

windows7-x64

1

README.txt

windows10-2004-x64

1

Analysis

  • max time kernel
    311s
  • max time network
    319s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    08-01-2025 07:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    README.txt

  • Size

    124B

  • MD5

    3b4bb14e17a60137e3e93c7adac41bcb

  • SHA1

    de09ed28df13d9325e816d0c656582a929077876

  • SHA256

    bde691c014e6a2527d5ef783d065edf14bcfe83b20c1ff97c22d280633b5287e

  • SHA512

    ec76f39b6ab4c6f822a1777c78212d659d86760458da9f050fba48bef12cba054573f25fc96278b49cdb163bed41a157123c01d3897226584cd1b57a653dfb50

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\README.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:2076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads