5c954e2770379a3b1d6ada9bb2e254435a41c6e0d2d95fe402c4857b2b57e139

Resubmissions

18/04/2026, 11:48

18/04/2026, 11:42

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/04/2026, 11:48

Target
Odin3_v3.10.7/Odin3.ini
Size 720B
Sample260418-nyd52agy3m
SHA256 5c954e2770379a3b1d6ada9bb2e254435a41c6e0d2d95fe402c4857b2b57e139
MD5 aebd94fec9ffe94546a0f85f4ed9a72e
SHA1 2747468a6b1174ec60a6b28f6d05b4bbccf47e6e
SHA512 9317f6668b61eed1d0b6b772ac68db94ee60fab0a41d576c4a301f37839f7e85dc233d0ab310fda12478163664c58a7ef90c04d2f63f3dc14ce4d52ee22b9a6c
TLSH
T15E019E3E0A1EEC0CA8FE4C6920791E01B0E30BA5A43F1673B8A5884A9D41417A1FE94B
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4748	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Odin3_v3.10.7\Odin3.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4748