Overview
overview
10Static
static
1026501.1000...1).zip
windows10-ltsc_2021-x64
8ConvertConfig.ini
windows10-ltsc_2021-x64
1CustomAppsList.txt
windows10-ltsc_2021-x64
1files/conv..._linux
windows10-ltsc_2021-x64
3files/conv..._macos
windows10-ltsc_2021-x64
3files/converter_multi
windows10-ltsc_2021-x64
3files/conv...indows
windows10-ltsc_2021-x64
3files/get_aria2.ps1
windows10-ltsc_2021-x64
8readme.unix.md
windows10-ltsc_2021-x64
3uup_download_linux.sh
windows10-ltsc_2021-x64
3uup_download_macos.sh
windows10-ltsc_2021-x64
3uup_downlo...ws.cmd
windows10-ltsc_2021-x64
8Analysis
- max time kernel
898s - max time network
489s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
20/10/2026, 23:06
Static task
static1
Behavioral task
behavioral1
Sample
26501.1000_arm64_en-us_multi_bc94140e_convert (1).zip
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral2
Sample
ConvertConfig.ini
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
CustomAppsList.txt
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral4
Sample
files/convert_config_linux
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral5
Sample
files/convert_config_macos
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral6
Sample
files/converter_multi
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral7
Sample
files/converter_windows
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral8
Sample
files/get_aria2.ps1
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral9
Sample
readme.unix.md
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral10
Sample
uup_download_linux.sh
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral11
Sample
uup_download_macos.sh
Resource
win10ltsc2021-20260911-en
General
- Target CustomAppsList.txt
- Size 3KB
- Sample261020-23tm6sys8q
- SHA256 1f2fbc910a0f016ead61d1feef41d1e7b75e234753572ae37c83d0dae955cc94
- MD5 fbf61cf1243b9d8ba4d7aae6925a2896
- SHA1 6f421f03f3bb6024009f3cba7c81abf64ebc440f
- SHA512 86d2f5d53014155c33406ca2788a0effbc367b58a3baa187668f0767f22d13ce235ce5d9b1154139a9e8de0b8a838273a82dbf67b882fcce60203476b18d8eae
- TLSH T1A971589085F9E8D3CE3A3883EDC78A51BDAA0BC79005DF1438E5861E68B37D6B309441
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5988 NOTEPAD.EXE