8bc4750ded2d159bac1f8fdbccb9bb1aef83bfb921ba878ab39fdc7f6c16af7a

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/04/2026, 04:25

Target
EsoBR/CHANGELOG_OTIMIZACOES.txt
Size 4KB
Sample260419-e2fnlahw41
SHA256 8bc4750ded2d159bac1f8fdbccb9bb1aef83bfb921ba878ab39fdc7f6c16af7a
MD5 691620008adecd90f8dcc7b58110049a
SHA1 acacbe644831b994e3ee90938c0abb7cf0fe6eb3
SHA512 d97880eaec9f04e1ed35f9ffeadb7de55c36c22267c31e89254e5af1990af07ac1d9feed4dddbd21f6e0baee49e25e132b19831000491e44e3903e627c0f29ef
SSDEEP 96:JcHkpiePhlmj6Skz0X3Ew0yPyIid5uPFVUw:JcNghI5k4X3E4/k5u8w
TLSH
T16591747A1CD706660927C3D16BCB81C3C6949156B104D2A6E5DF5A14A1CCBC8F1FDEAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1540	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\EsoBR\CHANGELOG_OTIMIZACOES.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1540