20ebace5d2e51551c0283d87f13dff0ae34870b1435c315483616f5d2e993970

Analysis

user interaction
yes
max time kernel
149s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
11/05/2026, 16:24

Target
bo3vnt-nexus(3).zip
Size 19.9MB
Sample260511-twvmwsev7x
SHA256 20ebace5d2e51551c0283d87f13dff0ae34870b1435c315483616f5d2e993970
MD5 03fda4d65525257d7fc1daba5c16d417
SHA1 aaa24cc8f8e17473cd422d8e0a67c405238b8f17
SHA512 90b699ce8edf0420dd3a97ae9fde4a44b412f9f574fb7ac1393e285f0a54f39cbc880937bd5c40a28547e54419b7fb820abe57f7dd6fb08208d655c71468b878
SSDEEP 393216:S1bW2DnuWQFiZ9Jyd3YytwOBtfsmxk00opt49zhU3wZG8C3ByyGcuNyo3BQ8:S1bnnuXqyJYymOBtxf9pgWwgPBTGAoRX
TLSH
T1452733408ADD6F0C8C3BF71BC9275D490AC34AB46CA56B454A9377AD5E8320D33EDE26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4864	NOTEPAD.EXE

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\bo3vnt-nexus(3).zip
1⤵
PID:5012

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\SubmitImport.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4864