Overview

overview

4

Static

static

3

data/brotl...SE.txt

windows10-2004-x64

1

data/brotl...SE.txt

windows11-21h2-x64

3

data/brotli/README.md

windows10-2004-x64

3

data/brotli/README.md

windows11-21h2-x64

3

data/brotli/decode.h

windows10-2004-x64

3

data/brotli/decode.h

windows11-21h2-x64

3

data/brotli/encode.h

windows10-2004-x64

3

data/brotli/encode.h

windows11-21h2-x64

3

data/brotli/port.h

windows10-2004-x64

3

data/brotli/port.h

windows11-21h2-x64

3

data/brotl...nary.h

windows10-2004-x64

3

data/brotl...nary.h

windows11-21h2-x64

3

data/brotli/types.h

windows10-2004-x64

3

data/brotli/types.h

windows11-21h2-x64

3

data/cacer...SE.url

windows10-2004-x64

4

data/cacer...SE.url

windows11-21h2-x64

3

data/curl/curl.h

windows10-2004-x64

3

data/curl/curl.h

windows11-21h2-x64

3

data/curl/curlver.h

windows10-2004-x64

3

data/curl/curlver.h

windows11-21h2-x64

3

data/curl/easy.h

windows10-2004-x64

3

data/curl/easy.h

windows11-21h2-x64

3

data/curl/header.h

windows10-2004-x64

3

data/curl/header.h

windows11-21h2-x64

3

data/curl/mprintf.h

windows10-2004-x64

3

data/curl/mprintf.h

windows11-21h2-x64

3

data/curl/multi.h

windows10-2004-x64

3

data/curl/multi.h

windows11-21h2-x64

3

data/curl/options.h

windows10-2004-x64

3

data/curl/options.h

windows11-21h2-x64

3

data/curl/...ders.h

windows10-2004-x64

3

data/curl/...ders.h

windows11-21h2-x64

3

Resubmissions

20/04/2025, 09:15

250420-k8b7mstlz9 10

20/04/2025, 09:09

250420-k4v4ystlt6 4

Analysis

  • max time kernel
    300s
  • max time network
    216s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20/04/2025, 09:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    data/brotli/LICENSE.txt

  • Size

    1KB

  • MD5

    941ee9cd1609382f946352712a319b4b

  • SHA1

    c045813a6c514f2d30d60a07c6aaf3603850e608

  • SHA256

    3d180008e36922a4e8daec11c34c7af264fed5962d07924aea928c38e8663c94

  • SHA512

    bae78184c2f50f86d8c727826d3982c469454c42b9af81f4ef007e39036434fa894cf5be3bf5fc65b7de2301f0a72d067a8186e303327db8a96bd14867e0a3a8

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\data\brotli\LICENSE.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:3188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads