4419d58fada9dcaa739c7873c131eb2bbcf33cd3b6c5190fb94db134a108a3c0

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/04/2026, 04:25

Target
EsoBR/EsoBR.txt
Size 1KB
Sample260419-e2fnlahw41
SHA256 4419d58fada9dcaa739c7873c131eb2bbcf33cd3b6c5190fb94db134a108a3c0
MD5 e98f4b26e0bf48e78c1a944807b3730e
SHA1 5e44a8f1b8ed8ab90d307c103d6d89dcff6b7a98
SHA512 4145294e1dff9c4183afd20acf40184a3c733b79d55b7e192fe5ca7473e221203dea8301df646cd7898559ac99dba455399fb3a225116a0bfe58cea4eee2c448
TLSH
T18221206E70223716CBD9B16B348EAB82D4145FCAC623D51B70CE490FA8C1BFE3040D1A
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1140	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\EsoBR\EsoBR.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1140