8e834cf0e625b235d6a40931d224e7237728738db89b3272c6ebb504c9b90720

Resubmissions

09/05/2026, 18:22

09/05/2026, 17:40

09/05/2026, 17:14

user interaction
yes
max time kernel
1668s
max time network
1115s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/05/2026, 17:40

Target
testing.txt
Size 2KB
Sample260509-v86flabs5v
SHA256 8e834cf0e625b235d6a40931d224e7237728738db89b3272c6ebb504c9b90720
MD5 ecd224903c1e70553f1853f1fa3e9f25
SHA1 fdbff82a61cef0b3278dc2fd4c4ffafa605a333e
SHA512 4cfca93b31079a516bf249fa840d3d6031958db343cc9e9fa6cf3cd00b7d8d6f033618dd7fd8e306ddf4c1d375f53ca1438f0b772707f28340363d662e608669
TLSH
T1D041B74D7B55E478DF8902C42D4AF8386E691A2646C7D446AB78E70C06DCEE8251220B
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4476	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\testing.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4476