Overview
overview
7Static
static
4c0zes Hard...an.zip
windows10-2004-x64
1c0zes Hard...an.zip
windows11-ltsc_2024-x64
15/lang/turkish.ini
windows10-2004-x64
15/lang/turkish.ini
windows11-ltsc_2024-x64
15/lang/ukrainian.ini
windows10-2004-x64
15/lang/ukrainian.ini
windows11-ltsc_2024-x64
15/lang/vietnamese.ini
windows10-2004-x64
15/lang/vietnamese.ini
windows11-ltsc_2024-x64
15/settings.ini
windows10-2004-x64
15/settings.ini
windows11-ltsc_2024-x64
15/un_report.dat
windows10-2004-x64
35/un_report.dat
windows11-ltsc_2024-x64
35/x64/RevoUn.exe
windows10-2004-x64
65/x64/RevoUn.exe
windows11-ltsc_2024-x64
65/x64/button.bmp
windows10-2004-x64
15/x64/button.bmp
windows11-ltsc_2024-x64
15/x86/RevoUn.exe
windows10-2004-x64
65/x86/RevoUn.exe
windows11-ltsc_2024-x64
66/!!!!RUNME!!!!!.bat
windows10-2004-x64
76/!!!!RUNME!!!!!.bat
windows11-ltsc_2024-x64
76/AMIDEWINx64.exe
windows10-2004-x64
16/AMIDEWINx64.exe
windows11-ltsc_2024-x64
16/Made by ...er.txt
windows10-2004-x64
16/Made by ...er.txt
windows11-ltsc_2024-x64
16/amifldrv64.sys
windows10-2004-x64
36/amifldrv64.sys
windows11-ltsc_2024-x64
36/amigendrv64.sys
windows10-2004-x64
37/Made by ...er.txt
windows10-2004-x64
17/Made by ...er.txt
windows11-ltsc_2024-x64
17/READ.txt
windows10-2004-x64
17/READ.txt
windows11-ltsc_2024-x64
18/Made by ...er.txt
windows10-2004-x64
1Analysis
- geolocation tags
eueuropefrfrance - max time kernel
29s - max time network
35s - platform
windows10-2004_x64 - resource
win10v2004-20260513-fr - resource tags
arch:x64arch:x86image:win10v2004-20260513-frlocale:fr-fros:windows10-2004-x64systemwindows - submitted
27/07/2026, 13:03
Behavioral task
behavioral1
Sample
c0zes Hard HWID unban.zip
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral2
Sample
c0zes Hard HWID unban.zip
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
5/lang/turkish.ini
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral4
Sample
5/lang/turkish.ini
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
5/lang/ukrainian.ini
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral6
Sample
5/lang/ukrainian.ini
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
5/lang/vietnamese.ini
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral8
Sample
5/lang/vietnamese.ini
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
5/settings.ini
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral10
Sample
5/settings.ini
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
5/un_report.dat
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral12
Sample
5/un_report.dat
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
5/x64/RevoUn.exe
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral14
Sample
5/x64/RevoUn.exe
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
5/x64/button.bmp
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral16
Sample
5/x64/button.bmp
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
5/x86/RevoUn.exe
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral18
Sample
5/x86/RevoUn.exe
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
6/!!!!RUNME!!!!!.bat
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral20
Sample
6/!!!!RUNME!!!!!.bat
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
6/AMIDEWINx64.exe
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral22
Sample
6/AMIDEWINx64.exe
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
6/Made by c0ze from 0x21 Discord Server.txt
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral24
Sample
6/Made by c0ze from 0x21 Discord Server.txt
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
6/amifldrv64.sys
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral26
Sample
6/amifldrv64.sys
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral27
Sample
6/amigendrv64.sys
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral28
Sample
7/Made by c0ze from 0x21 Discord Server.txt
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral29
Sample
7/Made by c0ze from 0x21 Discord Server.txt
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral30
Sample
7/READ.txt
Resource
win10v2004-20260513-fr
windows10-2004-x64
Behavioral task
behavioral31
Sample
7/READ.txt
Resource
win11ltsc2024-20260709-fr
windows11-ltsc_2024-x64
Behavioral task
behavioral32
Sample
8/Made by c0ze from 0x21 Discord Server.txt
Resource
win10v2004-20260513-fr
windows10-2004-x64
General
- Target 5/lang/ukrainian.ini
- Size 104KB
- Sample260727-qaqv2afk9s
- SHA256 d5b886dd759cd7442705a044cb12d174621e199bcea5e8728e63bcf6896f6bca
- MD5 83d527fe61a3cec460137d696af7465f
- SHA1 c6c2f9d8323ec851d3a973060fa0dcf8ba82d313
- SHA512 c1cf615536667825f2dea8a8cb763b0440ca23d3160f95bc2e960c1010bbe545b3a2832905ea927615a31810321268bf718f74af2d03dfb9a9e121a919e1f8e1
- SSDEEP 768:QoELKcU5ElkgV4WetF3BPSgFIrJYnkxZRSyZT6Yg9og4eLFK:GKcDlkgV4WetF3BPSZJY0vVTg5K
- TLSH T1DDA3670FF97C86649794D2508E9246EB11EAB70817B8D6C9A2CF7D6035AC63573223CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3216 NOTEPAD.EXE