e4bff363695d6fd3cc517cccf2821d8a0887389c49840f23a758920133a0f35c

Resubmissions

20/06/2026, 04:12

20/06/2026, 04:08

20/06/2026, 04:05

max time kernel
898s
max time network
881s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 04:05

Target
LICENSE.txt
Size 889B
Sample260620-entnaset4x
SHA256 e4bff363695d6fd3cc517cccf2821d8a0887389c49840f23a758920133a0f35c
MD5 0a5ac1788024462f52f748e391d1c96c
SHA1 2470e7906f4fd7fe5cec643489e83c4e2013f68d
SHA512 5d71a6d76b17459cb197dbeda3262426a01e99cc7588a238727e5af9d6381538bd4ceb64f8f2674045abaf07221e18632c64f084caaadcc27bd62631cf0fd0d2
TLSH
T10811DC1A779DC37215E342FD3D0ACD81B7175E64B30E56E5B06DC0883BAB62502314A9
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2844	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\LICENSE.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2844