Overview
overview
3Static
static
3NotepadApp...4.appx
windows10-2004-x64
NotepadApp...4.appx
windows11-21h2-x64
Notepad/Notepad.exe
windows10-2004-x64
Notepad/Notepad.exe
windows11-21h2-x64
Notepad/No...UI.dll
windows10-2004-x64
1Notepad/No...UI.dll
windows11-21h2-x64
1Notepad/No...UI.dll
windows10-2004-x64
1Notepad/No...UI.dll
windows11-21h2-x64
1Notepad/msptls.dll
windows10-2004-x64
1Notepad/msptls.dll
windows11-21h2-x64
1Notepad/riched20.dll
windows10-2004-x64
1Notepad/riched20.dll
windows11-21h2-x64
1NotepadExp...nd.dll
windows10-2004-x64
1NotepadExp...nd.dll
windows11-21h2-x64
1NotepadXamlUI.dll
windows10-2004-x64
1NotepadXamlUI.dll
windows11-21h2-x64
1OleControl...ls.dll
windows10-2004-x64
1OleControl...ls.dll
windows11-21h2-x64
1NotepadApp...f.appx
windows10-2004-x64
NotepadApp...f.appx
windows11-21h2-x64
NotepadApp...m.appx
windows10-2004-x64
NotepadApp...m.appx
windows11-21h2-x64
NotepadApp...r.appx
windows10-2004-x64
NotepadApp...r.appx
windows11-21h2-x64
NotepadApp...s.appx
windows10-2004-x64
NotepadApp...s.appx
windows11-21h2-x64
NotepadApp...n.appx
windows10-2004-x64
NotepadApp...n.appx
windows11-21h2-x64
NotepadApp...g.appx
windows10-2004-x64
NotepadApp...g.appx
windows11-21h2-x64
NotepadApp...n.appx
windows10-2004-x64
NotepadApp...n.appx
windows11-21h2-x64
General
- Target Microsoft.WindowsNotepad_11.2512.29.0_neutral_~_8wekyb3d8bbwe.Msixbundle
- Size 17.1MB
- Sample260509-ak2saaf15s
- SHA256 76676714aac1115872dc3da4a564697b91809e4330e33b50fbf6e4ffcc63fc0f
- MD5 ade1001b34b9f4ba981f50c5c2e8740c
- SHA1 13df4cc52ab97cbb53a7d7955440526717bb37b9
- SHA512 e3e6768f7a086477b903333c654e40537ab456fea6fa2c43348c807f962a0b2834d2db736ea4b182e865126a144e0d20e63357d79695be0e9bb8a11e5cef073a
- SSDEEP 393216:uOjTOO7peOU5HBT8wFodejARm373Yj8jExneOQQipklqOiMOwLBh/qx:uBpnHBvGIERm373KJle2rIau
- TLSH T1BB0733BAE3157CF6E66C9F37450700E1A2368826F223D5231D297D2D2C758601A99FEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
NotepadApp_11.2512.29.0_ARM64.appx
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
NotepadApp_11.2512.29.0_ARM64.appx
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
Notepad/Notepad.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
Notepad/Notepad.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
Notepad/NotepadXamlUI.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
Notepad/NotepadXamlUI.dll
Resource
win11-20250610-en
Behavioral task
behavioral7
Sample
Notepad/NotepadXamlUI.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Notepad/NotepadXamlUI.dll
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
Notepad/msptls.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
Notepad/msptls.dll
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
Notepad/riched20.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
Notepad/riched20.dll
Resource
win11-20260130-en
Behavioral task
behavioral13
Sample
NotepadExplorerCommand/NotepadExplorerCommand.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
NotepadExplorerCommand/NotepadExplorerCommand.dll
Resource
win11-20260130-en
Behavioral task
behavioral15
Sample
NotepadXamlUI.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
NotepadXamlUI.dll
Resource
win11-20250502-en
Behavioral task
behavioral17
Sample
OleControls/OleControls.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
OleControls/OleControls.dll
Resource
win11-20260130-en
Behavioral task
behavioral19
Sample
NotepadApp_11.2512.29.0_language-af.appx
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
NotepadApp_11.2512.29.0_language-af.appx
Resource
win11-20260130-en
Behavioral task
behavioral21
Sample
NotepadApp_11.2512.29.0_language-am.appx
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
NotepadApp_11.2512.29.0_language-am.appx
Resource
win11-20260130-en
Behavioral task
behavioral23
Sample
NotepadApp_11.2512.29.0_language-ar.appx
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
NotepadApp_11.2512.29.0_language-ar.appx
Resource
win11-20250610-en
Behavioral task
behavioral25
Sample
NotepadApp_11.2512.29.0_language-as.appx
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
NotepadApp_11.2512.29.0_language-as.appx
Resource
win11-20260130-en
Behavioral task
behavioral27
Sample
NotepadApp_11.2512.29.0_language-az-latn.appx
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
NotepadApp_11.2512.29.0_language-az-latn.appx
Resource
win11-20260130-en
Behavioral task
behavioral29
Sample
NotepadApp_11.2512.29.0_language-bg.appx
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
NotepadApp_11.2512.29.0_language-bg.appx
Resource
win11-20260130-en
Behavioral task
behavioral31
Sample
NotepadApp_11.2512.29.0_language-bn.appx
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
NotepadApp_11.2512.29.0_language-bn.appx
Resource
win11-20260130-en
Malware Config
Targets
-
- Target NotepadApp_11.2512.29.0_ARM64.msix
- Size 8.5MB
- SHA256 d54619eb5d7b320f39d7651d1a84111783fbcebacd3a5eb939eae39cf14826b6
- MD5 271cef4304d1aa59a09ef508ac5492db
- SHA1 88927e0a03eb300c6b3faf8835156b0e84a52fda
- SHA512 f32558fc008ac60d9a6700b8309add822bd0acdd4e401dbaf48c0f09581a86cab718abc2fafc175e2581d405305742d969ac9cdc46dcb83f99d9c34e6d26544d
- SSDEEP 196608:v8bOjTOSDzB7pCDGlK1OQqUfxgQ5imT5NRPGS2CZNnodjSNVAyPCm3733ItgeZ:oOjTOO7peOU5HBT8wFodejARm373YjZ
- TLSH T10F9633EBE31264D5E25CDFB7074946E0D32A4093F216C933963E381A6CBA8564DD0DEE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Notepad/Notepad.exe
- Size 3.3MB
- SHA256 9edd3050acb1f1d8840de37ddc159cffa7abba0e80fe79d4826435051f18e2bc
- MD5 8b13c82e877be1f489b35e9cd18a28b5
- SHA1 e17d905a0e739d4d7126fc318d85f675988c05b3
- SHA512 4b501be00560783af148fb07e28f3920e8003e00534767190390f6b92e1fff725dfec65aa0e960785272e4c6a508be4fcbfdab84ae95425ce528a337540ac778
- SSDEEP 49152:nJmB5sRRrKuSrMmm1C4ur930oRADhh9+V:nJQ5CRNSrt+C4C3Kn9+V
- TLSH T171F56DA0AB5DF4A0F2CAE3BC5E658FE43137F97086748247756A030EDCD26D28DE5162
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Notepad/NotepadXamlUI.dll
- Size 6.9MB
- SHA256 cde76b1c46265ccb280ee6152773043551ab55832e96acfc40fe2503c2c3382f
- MD5 9ba581d6121e00c40720ff9a247a8f53
- SHA1 5f3f69b759199f05e7410a363e39bb21f0df2f6d
- SHA512 2f8a071574bcc8585e8197cda86e13cc56596922c2d72772c5b374f9de5937f3f6cbf51784b3ea1ec728dbc773e19b38eceed32f746213ed66f0c9b85d22df06
- SSDEEP 24576:w21caGlnTq5t76O2K31RGyOOvpMnU20ZtED0LvZk0xh0k+0IgnpDDvaSTBe3WZvD:bgq5RTQWvLplr7AEpBWiZY
- TLSH T12D76EAA1BBA4E562D5CF62392E778BD82A33F0B29D3083477556131E9DB27D38ED2011
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Notepad/NotepadXamlUI.winmd
- Size 141KB
- SHA256 86326fce775275f2feba220676ad46a193f1ad6fb9a20daa369e4e3303818c6a
- MD5 ceb1044dfb1f1a26d54f76f0051edb8f
- SHA1 d9829e8cc62810cceab1b33fb9256d1e27408b31
- SHA512 28a2e580bbeaa1033cfd197c818355b10520570cb9013001451bdcc7eaf6ac451e8e8d9e61cc24fe18c19131d2e46071e1fd9b6d38a4586bd5ccd76cdeca1500
- SSDEEP 3072:83EQJxpT3GiX/YeGRpb0ybREwlzMd6QlF8tnfvD:VMpbBX/Ye2t0ybREwlzMd6QlaX
- TLSH T156E3C247FF979E77CC8D6A3D36211C80662CC55F421EE7A29A0A2C3C9CB73960E91479
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Notepad/msptls.dll
- Size 3.0MB
- SHA256 de18e2b13e6c5434c258e042d61b4d2b818707e01a14e46b835910f1ceafa046
- MD5 7148386b8c9043242059aa97c7744b07
- SHA1 1ccb8accf599f28466c81811db5264ab7bcda8c0
- SHA512 5887d65c0a5f35826bb99e94533fb02320ac9141f92035fa98fcd151563f234db602b6c0e850655652615496a53cfc1cfe08e3f0eb44c303f3ac00e6e353f23b
- SSDEEP 49152:JzU5r0c4+Hb4cy5zDR2bFjB/8i2Nus9Nmy2YF6:1UN0cbbW5zlti2Nusa3I6
- TLSH T1BAE55A81670EB8A2D3C3A47CCF658914F43FB9B8D861D862315B061FE94CBE6D9E0176
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Notepad/riched20.dll
- Size 7.0MB
- SHA256 045250be73f30f54bebb4232a579ffb424d2286d9c26b36de3bba6b4358defee
- MD5 63eb67caf6de5755fcef02c75b3127ea
- SHA1 dada2b00d1f25d44f8606976b21fc1f643ecbb27
- SHA512 38303899ba1bbad234ed87de6e5e31f28e9882cdbd4c392479a1795e4d145dc19188f3d31793b1e55b98d69540465b9c9a0c888c3ab68137d4a64937339e5038
- SSDEEP 98304:YrooSZza4ebe9s37DoEeSWKa1g6raT5/m1dbX2YkF2WWKGA62:YrooSZzafa9s3XoW5/mOYkF2WWKG4
- TLSH T15C765BA1678DA8A2C7C3963CCF338941B437B5798C71C5873057024FEDAABD5D9A01AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NotepadExplorerCommand/NotepadExplorerCommand.dll
- Size 294KB
- SHA256 bc0c7b0c799a5bc0dbffab2d172b00ea7e9654318a3d6c528315b98373df4395
- MD5 88614ba38dc90e5c96a369abfcad3651
- SHA1 c68dd9237a8110ec407f27ef9ada416d93909fa5
- SHA512 bc1d7ea94bfe9b7ff04b86310d2112a4386a16083ee9d485d98c494e857e336bcef9616e215e44bdbb805e0e6d1b455b20e084e656ffa84f50d1548f67b56b35
- SSDEEP 6144:r9NFH/oyGvW8ph0lhSMXlBXBWfmkVPVeNW2NX:r9NFBGO8ph0lhSMXl+BrE
- TLSH T1EA549E52F78CEC26D2C4E2BC4DA54B58373FA9608B31420B311A932FFDA77D29D95642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NotepadXamlUI.winmd
- Size 141KB
- SHA256 86326fce775275f2feba220676ad46a193f1ad6fb9a20daa369e4e3303818c6a
- MD5 ceb1044dfb1f1a26d54f76f0051edb8f
- SHA1 d9829e8cc62810cceab1b33fb9256d1e27408b31
- SHA512 28a2e580bbeaa1033cfd197c818355b10520570cb9013001451bdcc7eaf6ac451e8e8d9e61cc24fe18c19131d2e46071e1fd9b6d38a4586bd5ccd76cdeca1500
- SSDEEP 3072:83EQJxpT3GiX/YeGRpb0ybREwlzMd6QlF8tnfvD:VMpbBX/Ye2t0ybREwlzMd6QlaX
- TLSH T156E3C247FF979E77CC8D6A3D36211C80662CC55F421EE7A29A0A2C3C9CB73960E91479
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target OleControls/OleControls.dll
- Size 308KB
- SHA256 3bea2ae3d72dc92526dfe4ebf639eac7cfdfb8f98f6d3e1bae6493ae7155663d
- MD5 1acdc136e17286bb4b15c7b1c6ac5e32
- SHA1 8c333e03c0319b746fe1e5a6d9d97da12ff4b961
- SHA512 a14d2e132114eee187336888422be94b1cf75e81c03a72d18192bad2169155efddae353d0d3394d993ef978e24575483cc61d259bd73eaedf70bdbbbd26e8a19
- SSDEEP 6144:fRSo2E1rGB9cKtIWN9ph0lhSMXlBXBWfKkRIWxKE1gp0Sm:fh2E1aKUIA9ph0lhSMXl+VRPP
- TLSH T18D649C62BB4CECA5E2C4827C4EE61B28373FB9748771434B3229824DFDA73D19D95642
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NotepadApp_11.2512.29.0_language-af.msix
- Size 19KB
- SHA256 cbb6092698d92a98096c27a3ee9cadfd66ed3308212bcc2ea4bdd0a239bc1cb2
- MD5 9bb28e2fad6f1d0fa8e1d7e1fba2bb03
- SHA1 8374a691c57c2d340e68235ae3f446cc83702811
- SHA512 3b4e5beea8fdb2c18865a53f245771c0934411d7c73d786e984c0339889772a3d9f5f46ee118256bf39889fa31a18dfa8d3eed53be2ea60903387fde00b253d9
- SSDEEP 384:CGwpWHU6TkfftGy+42kOhGHoOm8O8N4/byLPIvTlOfeKamOirAeQwUdIy0Io8LF0:C+DTkffDarIHob8O8NSSRP7EwUd5dLF0
- TLSH T1B092E1183E2E9034E10683F844A991752AF240D9C099BBE328C6F5F798B5F6575F1C7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NotepadApp_11.2512.29.0_language-am.msix
- Size 20KB
- SHA256 ba56b423b421b31d11b5fe93214b1cfd79ef35c326c9e37461d77040e076b706
- MD5 8dd3688db48d18e15a2328dde4a3017d
- SHA1 4f4f85f8191ed675ba640f12b6f186a127c9d0d8
- SHA512 09a0b4e13a233811bc4ae98dc8889d816c22c49d4c24307b1fa81a67f6b5598bb4e17856f31ed330695cdb42ec0decf2c83f1e0553de81482add0f49b77c81b7
- SSDEEP 384:ldxlGMRvc1DOs+igCSzMo3IHIbPSm1AEqC3SmreOMXMQ4yCU6G7GpuTrgm:9wMSh+HxQo3IHIbP91lqC35B8MQ4sopA
- TLSH T1BA92D03F3DA398F3EF86387F70867384B8A8984563D175D00A15B916E14D89B470A27B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NotepadApp_11.2512.29.0_language-ar.msix
- Size 20KB
- SHA256 6b8b84537785d8ff6ecf471bb413ea635099edf4a203c2c8ea9e3c36007cdcac
- MD5 e21db27224b4f7e2887314252068aa43
- SHA1 24a937e2ea57c99efd01fbac32d267ee447bedd4
- SHA512 c1d91ee252c467a0bda40bd5a5c29643d86be43a59cfd194b4b8933023200e3aa86f23a23f3f8e3322700dde4d5146452a788abfe7ef1afabb3c2535d53ce8c6
- SSDEEP 384:ltfLxPJVAhco6s1wdmQUpM8qiuPbCh3qDNuTT7WmUVYiJdOpn78cy00PJs:lZNJVAhco6s8mQ+M8eP9DNM7N4SV8cyI
- TLSH T17092D03DFADA3092D712F7B7A04B0008A683C4B57C5F8E606D0E5ED854655BCF9A6388
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NotepadApp_11.2512.29.0_language-as.msix
- Size 21KB
- SHA256 71ccbe23a67c98c06fd1130be48fa0dbaf2d93116fe0fb46c7ea47a002b02be5
- MD5 58b1017af060fd33383d700d3ca6acdd
- SHA1 aa893abdacd62b4223f682686db1b7c29a4bbfad
- SHA512 98a8e7e30bb0868595fe304e8b637f425f982a591cc1e55e0fac783da55b8d439a4249c2dde09fac8960878969f5b2a0a8949dc4abd6087dd6423c0c784146ad
- SSDEEP 384:0dK5OCoJJTcFJSaKxZWxsk8jm48+N1jiLkjfJmTzgUwqwmU510kPKvxRQP2ZZDwa:0sEJJTcrSaKxZWGkINXigj03gUwN5109
- TLSH T19AA2D03D8EB1A550E6801532EEC724E1BD372979E7F4C3913174146C6C84A5A3276B9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NotepadApp_11.2512.29.0_language-az-latn.msix
- Size 19KB
- SHA256 63f9870213b660de444ba465744def73f8b531eeb9aac2c3da9903960e506e30
- MD5 2ae60747db43adc6d27c1db92f24cd66
- SHA1 2182cfe4a6fb5dc0bcddeca1628cc4fe66dfacdc
- SHA512 df37243230a3d1a8d5a2879bbadc9b27aca0e1c68409625491a833770df9ed6a8ada7e2ba77a7c4feb6b20dd79b2acdaf20179b3fee7936c5c10c20ccd7c9512
- SSDEEP 384:q9f+tdVoHbScAJl/ALmQZXeXjFlp4NA0YDDfQg1KwQYr1onvF8:q92tdVoHbJKWORluYDDzKwQYSvF8
- TLSH T1C692D192A32AB5F2C54F41F341CB3561A8D091DC6760EE2BD883AE7F18921491EB56CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NotepadApp_11.2512.29.0_language-bg.msix
- Size 21KB
- SHA256 a9bef585ae15b7470ba10316c359c6d520731cb58a73e0f7077781c058922ea5
- MD5 5befb20c74905eab47b17e1d5319f949
- SHA1 d395b35975faaa231add215512b39bd61f0ff9ea
- SHA512 738069120ac0c9d649e7a2767960daca7b86b8d7f2ecb2b66e241cd39d753d702b792db2052130290d62c9294277d167c75a1e814b441502545b977980261f9f
- SSDEEP 384:G7+GjO+sq4SkAlnit4dhqpuT0c3kjgykBuUkDH3WZmWK3m8diYQ0NpJd5CVk0cja:wa9dAlithpuACkjJUkD33FdhpNMTvAmd
- TLSH T1BFA2E03CAF3950E6DA693C72814EB1E048D34026487B69C9F511E29CB675D38735CFDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target NotepadApp_11.2512.29.0_language-bn.msix
- Size 21KB
- SHA256 ef88e5c836328be3754bd3f23b49e46f60492375c4ab82142d88f6508170ff88
- MD5 2cf67fdaa221fae1033f6c35a0b8f2e3
- SHA1 c99333929c91cdfd4491f2475d37069f877b2a86
- SHA512 7c10f64fbc4bd1d91d2eb8d38eae5a3cbb51d61df445868b177616175f9e5fb5b0512b070bbbdeb0d9c7fcba7fdc0826f8392136627abe179b7378ec18d42b66
- SSDEEP 384:Bt/JskJ+u4kaSCaa4E/LlehA01Z2xH1FPDKGntkSVq1VXaQTvN0VoxOvfu:FsgN+aaPLleiaCnKtNXaUxyu
- TLSH T1DAA2E011BE58FC2AF22344B1F11670B9F929116D60FF85135E714FA8AED2C336324E98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10