6a995dfe9d0af9ab8c4e78ad81de5c9589ecd2cdbde82818822547ad94f8bf49

Analysis

max time kernel
149s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/04/2026, 04:38

Target
Installation_Instructions.txt
Size 1KB
Sample260416-e9ndeafv2r
SHA256 6a995dfe9d0af9ab8c4e78ad81de5c9589ecd2cdbde82818822547ad94f8bf49
MD5 e6b406926017138ff37e9a83a8a5078e
SHA1 782d290dd1d8759220d441c9542d705a64d87390
SHA512 7149254b876f2eff8e06f9f905002115418c38c0d29f91b613ac365fed573ff7dcb6dd555a005167596cece5a2bae36a6c79f4eb108ad1dc4e3b8fd180c38bf4
TLSH
T1BB31035DB698A32927924F4776323D82D1425440E3454894BFAEE4C8DF3EF60CFB2B86
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
312	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Installation_Instructions.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:312