2fd79742d2fc4685dc2e088efc0606355b329e77e3fdeb3d85d43266d1af6486

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/06/2026, 14:04

Target
OmesFree/config.ini
Size 615B
Sample260620-rdbe7agx6x
SHA256 2fd79742d2fc4685dc2e088efc0606355b329e77e3fdeb3d85d43266d1af6486
MD5 15a01c8f55f2a609545d74dd868d850c
SHA1 c7cd0b30b44403363535431dc0ccf2569fa19c19
SHA512 4f736e22c2131834c40db4876017496c895d333698e0f6184c43c450d77f679311185e5f35e71d754311182f8f1de16d30c646abea4aa03d7f34d024acc98aba
TLSH
T1C0F0283D7AC9BA39CAB78511A9C161A221755400350B35B1B1AD41AC1B23F7824BCE0A
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4464	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\OmesFree\config.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4464