Analysis
-
max time kernel
104s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20250313-en -
resource tags
arch:x64arch:x86image:win10v2004-20250313-enlocale:en-usos:windows10-2004-x64system -
submitted
04/04/2025, 12:02
Behavioral task
behavioral1
Sample
executor.zip
Resource
win10v2004-20250314-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Bloxstrap-v2.7.0.exe
Resource
win10v2004-20250314-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
BootstrapperV1.14.exe
Resource
win10v2004-20250314-en
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
readme.txt
Resource
win10v2004-20250313-en
1 signatures
150 seconds
General
-
Target
readme.txt
-
Size
237B
-
MD5
4705d304bdd3882202fb7d47bfbb6b65
-
SHA1
6177b3db5fc0ea4cfb1c9e5ee4e17c8dbd779cc6
-
SHA256
310fd17ebc2facb45116dfb596f84910ab384324704140b7752f8fac56642613
-
SHA512
0c8de8ce8dfceb82d0ecefe41c499022acda8dc42054947760c3a9d79d990aa3d58dd0a49633e2ee5db7e9db5d9ae963568f0ba28c69fe94aa37ed2da8a0abec
Score
1/10
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5524 NOTEPAD.EXE