Overview
overview
10Static
static
1026501.1000...1).zip
windows10-ltsc_2021-x64
8ConvertConfig.ini
windows10-ltsc_2021-x64
1CustomAppsList.txt
windows10-ltsc_2021-x64
1files/conv..._linux
windows10-ltsc_2021-x64
3files/conv..._macos
windows10-ltsc_2021-x64
3files/converter_multi
windows10-ltsc_2021-x64
3files/conv...indows
windows10-ltsc_2021-x64
3files/get_aria2.ps1
windows10-ltsc_2021-x64
8readme.unix.md
windows10-ltsc_2021-x64
3uup_download_linux.sh
windows10-ltsc_2021-x64
3uup_download_macos.sh
windows10-ltsc_2021-x64
3uup_downlo...ws.cmd
windows10-ltsc_2021-x64
8Analysis
- max time kernel
898s - max time network
475s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
20/10/2026, 23:06
Static task
static1
Behavioral task
behavioral1
Sample
26501.1000_arm64_en-us_multi_bc94140e_convert (1).zip
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral2
Sample
ConvertConfig.ini
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
CustomAppsList.txt
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral4
Sample
files/convert_config_linux
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral5
Sample
files/convert_config_macos
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral6
Sample
files/converter_multi
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral7
Sample
files/converter_windows
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral8
Sample
files/get_aria2.ps1
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral9
Sample
readme.unix.md
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral10
Sample
uup_download_linux.sh
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral11
Sample
uup_download_macos.sh
Resource
win10ltsc2021-20260911-en
General
- Target ConvertConfig.ini
- Size 652B
- Sample261020-23tm6sys8q
- SHA256 d70a286b1c6d7b00bcf024ffd4136013d97f8434b1eefd048a3f944a17e8df8c
- MD5 5d525060c0da539b02ad6aa972ae2084
- SHA1 912f4e962cc4a0465f02965f6a0a271d20d07105
- SHA512 1a1ed0f825ea5bb991b71d17297c8b2a553cc63129725a5011f81a4453a9be1f2d126c237176d39349141dee0dd0f0e787e003307acd577845195b5d67900d5f
- TLSH T15FF04C851B0386FE04E7D1440EF511A161E6C0A39C72224835AC53EC6F6B2685AF9B89
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2288 NOTEPAD.EXE