07b783c11f1ad5f560669ce9192352b4797bdf0b91ba9ac29cbd960e97d0d335

Analysis

max time kernel
150s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/05/2026, 16:10

Target
Spotify/only.this.ini
Size 59B
Sample260502-tmp12sbz9v
SHA256 07b783c11f1ad5f560669ce9192352b4797bdf0b91ba9ac29cbd960e97d0d335
MD5 05d12f75686c8463467b20aac27f1d66
SHA1 670525365892906db31cfcf4a6fec73d60e365e2
SHA512 dcf6270d3b22b405451068e4dcf7aa168219d823de4e5b76552325f0ee8aecbed9498491ca5028dae5224319a713a41a99eee25b97ae5dc65b479e772e420c48
TLSH
T13CA002CB4559018802D4420A4674699110C0790A02243028406B52921BE49D1247B357
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4956	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Spotify\only.this.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4956

memory/4956-0-0x00000224ED810000-0x00000224ED93A000-memory.dmp

Download

memory/4956-5-0x00000224ED810000-0x00000224ED93A000-memory.dmp

Download