1e47bd52e7d4658666304f709bf3355c3e166d037494987d8fc68a71fb18e64f

Analysis

user interaction
yes
max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/04/2026, 17:44

Target
temp_extract_dir/hash.txt
Size 193B
Sample260415-wba4vsfv3n
SHA256 1e47bd52e7d4658666304f709bf3355c3e166d037494987d8fc68a71fb18e64f
MD5 1b2110691f3ea301c1feef7984f49be0
SHA1 84d023b34570d6c39266b2595fecc18f20f571a8
SHA512 b2fd2914582663988ce5409f1bdc7305526d7b262853c96db8881bb5bdf6f9a205531e325dcff1ec5dbcfc2f62fe0f1909daf8f151131876056ba89d98de84e9
TLSH
T152C0C0A8A327CB60831085EA768C03809703322310C71518E0B0C8011FA087C2F3C0BD
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2908	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\temp_extract_dir\hash.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2908