6688247a4adb2b38f18ef1c293482a394fa7e041110131f5f515a966c41e0490

Resubmissions

01/06/2026, 21:51

01/06/2026, 20:08

01/06/2026, 18:36

user interaction
yes
max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/06/2026, 20:08

Target
lib2to3/Grammar.txt
Size 8KB
Sample260601-ywph4aev9x
SHA256 6688247a4adb2b38f18ef1c293482a394fa7e041110131f5f515a966c41e0490
MD5 0a88c3b5566aed4547d21c95e38a8a85
SHA1 5e558f0def7eb2976e4cf296a308b373bf567234
SHA512 9a655fa0f8ba2f14c0e4568e55454b2ae79d05c2c7107b6f85440a13b57d842fc05e981f36069d3409ffba9bd10562f7171e80beac8816b65d3d77793bdedef1
SSDEEP 192:UXA+piq3vVDRGSdkFobat4/JSjjpZMhmb8b72Q:UwqVDZdQoL/JSjjp9If2Q
TLSH
T12C02B81CB6D7068606F11477421DF7FB869DD1CE70154170FBCCA2FC9FEA8551226A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
984	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\lib2to3\Grammar.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:984