Overview
overview
7Static
static
4c0zes Hard...an.zip
windows10-2004-x64
1c0zes Hard...an.zip
windows11-ltsc_2024-x64
15/lang/turkish.ini
windows10-2004-x64
15/lang/turkish.ini
windows11-ltsc_2024-x64
15/lang/ukrainian.ini
windows10-2004-x64
15/lang/ukrainian.ini
windows11-ltsc_2024-x64
15/lang/vietnamese.ini
windows10-2004-x64
15/lang/vietnamese.ini
windows11-ltsc_2024-x64
15/settings.ini
windows10-2004-x64
15/settings.ini
windows11-ltsc_2024-x64
15/un_report.dat
windows10-2004-x64
35/un_report.dat
windows11-ltsc_2024-x64
35/x64/RevoUn.exe
windows10-2004-x64
65/x64/RevoUn.exe
windows11-ltsc_2024-x64
65/x64/button.bmp
windows10-2004-x64
15/x64/button.bmp
windows11-ltsc_2024-x64
15/x86/RevoUn.exe
windows10-2004-x64
65/x86/RevoUn.exe
windows11-ltsc_2024-x64
66/!!!!RUNME!!!!!.bat
windows10-2004-x64
76/!!!!RUNME!!!!!.bat
windows11-ltsc_2024-x64
76/AMIDEWINx64.exe
windows10-2004-x64
16/AMIDEWINx64.exe
windows11-ltsc_2024-x64
16/Made by ...er.txt
windows10-2004-x64
16/Made by ...er.txt
windows11-ltsc_2024-x64
16/amifldrv64.sys
windows10-2004-x64
36/amifldrv64.sys
windows11-ltsc_2024-x64
36/amigendrv64.sys
windows10-2004-x64
37/Made by ...er.txt
windows10-2004-x64
17/Made by ...er.txt
windows11-ltsc_2024-x64
17/READ.txt
windows10-2004-x64
17/READ.txt
windows11-ltsc_2024-x64
18/Made by ...er.txt
windows10-2004-x64
1Analysis
- geolocation tags
eueuropefrfrance - max time kernel
30s - max time network
29s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-fr - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-frlocale:fr-fros:windows11-ltsc_2024-x64systemwindows - submitted
27/07/2026, 13:03
Behavioral task
behavioral1
Sample
c0zes Hard HWID unban.zip
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral2
Sample
c0zes Hard HWID unban.zip
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
5/lang/turkish.ini
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral4
Sample
5/lang/turkish.ini
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
5/lang/ukrainian.ini
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral6
Sample
5/lang/ukrainian.ini
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
5/lang/vietnamese.ini
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral8
Sample
5/lang/vietnamese.ini
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
5/settings.ini
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral10
Sample
5/settings.ini
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
5/un_report.dat
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral12
Sample
5/un_report.dat
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
5/x64/RevoUn.exe
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral14
Sample
5/x64/RevoUn.exe
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
5/x64/button.bmp
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral16
Sample
5/x64/button.bmp
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
5/x86/RevoUn.exe
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral18
Sample
5/x86/RevoUn.exe
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
6/!!!!RUNME!!!!!.bat
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral20
Sample
6/!!!!RUNME!!!!!.bat
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
6/AMIDEWINx64.exe
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral22
Sample
6/AMIDEWINx64.exe
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
6/Made by c0ze from 0x21 Discord Server.txt
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral24
Sample
6/Made by c0ze from 0x21 Discord Server.txt
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
6/amifldrv64.sys
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral26
Sample
6/amifldrv64.sys
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
6/amigendrv64.sys
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral28
Sample
7/Made by c0ze from 0x21 Discord Server.txt
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral29
Sample
7/Made by c0ze from 0x21 Discord Server.txt
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
7/READ.txt
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral31
Sample
7/READ.txt
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
8/Made by c0ze from 0x21 Discord Server.txt
Resource
win10v2004-20260513-fr
windows10-2004-x64
General
- Target 5/settings.ini
- Size 3KB
- Sample260727-qaqv2afk9s
- SHA256 cd34f9148dfd6047c89d6b6401ebad46216810da9196a409bedf2251ea70b5d7
- MD5 3424f791dd8cac995d10ae13dec336a2
- SHA1 8b5bd9fc5b9539fc274976ccc006ae3ceafeca47
- SHA512 e019bb32ccb2ccb90780c1c590599c37ee3b4878d467e3a1b6b19ecd752bfcf0ea1dc1abeee62f924066c04461a2a1771d172aff75b3d8b6564107a4f9b0cee7
- TLSH T12E81B1922AE4241AB373BF95EFB8D9688727BDE44C2AC51D42E0014F05F5A81D9327B7
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2784 NOTEPAD.EXE