72cab35a81b90d825c9875fea6ae6e5d2bd5c16b0d8ae0864eed81bbf6fa9b09

Analysis

max time kernel
149s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/04/2026, 04:38

Target
Readme.txt
Size 1KB
Sample260416-e9ndeafv2r
SHA256 72cab35a81b90d825c9875fea6ae6e5d2bd5c16b0d8ae0864eed81bbf6fa9b09
MD5 bc1b28e828257f2af40705d99e72787e
SHA1 aab50e7b0c52fad3719b6b736c7e9c4dc490cc91
SHA512 0e6ed295bfd1b568a417d2d3ec33c75b0881e8b851b94e89fce60574335aa20d6361ceec2c4923cd7e980bcd3c2bf997d35e996b2a3a1ffe25c2da914b7c8c4b
TLSH
T11931F1AA79107B5D33168EC560332E075911F044D765185A371EA1CADFFBE11EF53320
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3268	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Readme.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3268