34da9ff45c13577631f67e33d11b8a26e3d22ca685d00c388b6122a795800588

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/05/2026, 04:29

Target
driver/mm.inf
Size 4KB
Sample260509-e4g97sdz6m
SHA256 34da9ff45c13577631f67e33d11b8a26e3d22ca685d00c388b6122a795800588
MD5 d8030afe09a2f984be00389b31f7039b
SHA1 ab7a55fa6641cc31b0b7e70c8680bbbd553fc8a1
SHA512 0787e9e95369686b20bcbddb9ff984111c4ed53a064fc8f198691db5c124dfbe1b1f4d434dbfd81482545b723c01325ed9bcc626f461191b3ae4095222df10a6
SSDEEP 48:MoXx6bEEAkWfd6QxVO2X2iI+xCPOgbqGSW8nijzXk0m0hX:K4zDI+xCP1SW8niXX
TLSH
T14281A082A3DC0208B1F36E84EBF550B65A227C99593CE65D11E442DA5AF0E40DAF37E3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1716	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\driver\mm.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:1716