Overview
overview
6Static
static
160ede2cf5a...52.zip
windows10-2004-x64
160ede2cf5a...52.zip
windows11-ltsc_2024-x64
160ede2cf5a...52.zip
windows10-2004-x64
160ede2cf5a...52.zip
windows11-ltsc_2024-x64
1GoldIsland...a).zip
windows10-2004-x64
1GoldIsland...a).zip
windows11-ltsc_2024-x64
1Readme.txt
windows10-2004-x64
1Readme.txt
windows11-ltsc_2024-x64
6Analysis
- user interaction
yes - max time kernel
298s - max time network
58s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/10/2026, 22:28
Static task
static1
Behavioral task
behavioral1
Sample
60ede2cf5aaef4293a5e9d571215438a1c4d7de345efb42976ede6b819474752.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
60ede2cf5aaef4293a5e9d571215438a1c4d7de345efb42976ede6b819474752.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
60ede2cf5aaef4293a5e9d571215438a1c4d7de345efb42976ede6b819474752.zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
60ede2cf5aaef4293a5e9d571215438a1c4d7de345efb42976ede6b819474752.zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
GoldIsland 0.7.5(beta).zip
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
GoldIsland 0.7.5(beta).zip
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
Readme.txt
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
Readme.txt
Resource
win11ltsc2024-20260911-en
General
- Target Readme.txt
- Size 366B
- Sample261018-2d43lsbt7z
- SHA256 b3c1358b8f74b9e461bb2ffd36f6346875d9a4adee93cb042fa55626187a46f4
- MD5 84aa6e899a75d33698be348e755eb583
- SHA1 02da73ba610f6e33b53e17790f8bb916ec196575
- SHA512 44b7720169cded11cd1895781b84e8e42ab077892a1e31ee5155e5bedd2d36c81ae446451f4e79f5b2282429762369d1b0b284e791eb628941daee84d8c2e278
- TLSH T163E02B9B92A90EA092970301510764C45E118294520E8D38B40FB0945FECB7D5C63C4B
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5436 NOTEPAD.EXE