GreenBlood Ransomware bootTel.dat artifact created in system drive root

Ibrahim Saud@tektrix

•updated Jun 24, 2026•1•0•4

Detects the creation of a file named 'bootTel.dat' directly in the root directory (C:\). This file name and location can be associated with certain malware or suspicious activities, as it's not a typical system file.