baf84c60b194a34f5c769be7639db957f411120bc1400963b0dbbf327fc36d6d | Triage™

Resubmissions

27/12/2025, 16:30

251227-tz9k8atkhp

14/11/2025, 18:24

251114-w2fr2avqfv3

12/04/2025, 14:57

250412-sbk3aawry59

12/04/2025, 14:56

250412-sbdyzawrx91

12/04/2025, 14:53

250412-r9mhbswrv88

Analysis

max time kernel
432s
max time network
434s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
12/04/2025, 14:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
guns.lol-view-bot-main/proxies.txt
Size 2KB
Sample250412-sbdyzawrx9
SHA256 089bcf2033cfae289591e42def8dd18e90ed9eac165c5c593cdc7afd2c670fd4
MD5 771b52774d05f4f4bca9ed84721a7b03
SHA1 1c70c7c94fee036c9257de6917a853a83ce69e93
SHA512 49cdaa9d372b499e555d8b68fc8b6ed90cd4874c58b657946184c7f66f7dd3fc59e4bc3d5e13f3b53472e352add86f57eb2e9b8b2b25a937afd2b8ea0f761d0b
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5584	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\guns.lol-view-bot-main\proxies.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads