Overview
overview
8Static
static
3iOS_Indexi...on.zip
windows10-2004-x64
1iOS_Indexi...on.zip
windows11-ltsc_2024-x64
1IosIndexin...ss.exe
windows10-2004-x64
7IosIndexin...ss.exe
windows11-ltsc_2024-x64
7IosIndexin...ss.pyc
windows10-2004-x64
3IosIndexin...ss.pyc
windows11-ltsc_2024-x64
8README_One...on.txt
windows10-2004-x64
1README_One...on.txt
windows11-ltsc_2024-x64
1Start-iOS-...er.cmd
windows10-2004-x64
3Start-iOS-...er.cmd
windows11-ltsc_2024-x64
3Start-iOS-...er.ps1
windows10-2004-x64
3Start-iOS-...er.ps1
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/06/2026, 15:01
Behavioral task
behavioral1
Sample
iOS_Indexing_Checker_Windows_NoPython.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
iOS_Indexing_Checker_Windows_NoPython.zip
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
IosIndexingProgress.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
IosIndexingProgress.exe
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral5
Sample
IosIndexingProgress.pyc
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
IosIndexingProgress.pyc
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral7
Sample
README_OneClick_Distribution.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
README_OneClick_Distribution.txt
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral9
Sample
Start-iOS-Indexing-Checker.cmd
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Start-iOS-Indexing-Checker.cmd
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral11
Sample
Start-iOS-Indexing-Checker.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Start-iOS-Indexing-Checker.ps1
Resource
win11ltsc2024-20260618-en
General
- Target README_OneClick_Distribution.txt
- Size 1KB
- Sample260622-sd87wsdw8n
- SHA256 596b2f14442bb1bf38195f6961ee60701d74fc7545d8f111e2a271d25a22b305
- MD5 9e24fa97404e28dd2e15703e935d9856
- SHA1 17ceb796e5391727d54b30a608722729910533a8
- SHA512 aa25d3f874d8c96e51a34f571d57ec7bf6424c3ed9d08a35389606d6404b2987afc883eb8489c3bb86d36613b7d6ca788769430d2f0a416b06f5af6ea59f9814
- TLSH T1E3215418431AA611EB381DC21B4CE9A57165B9A55F3DC8EFC58BC261ADCC999D033AE0
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5672 NOTEPAD.EXE