c9f0504ccecdd2b4ccfae9c2af7a36552b37cd670ad2367197785bb67bd7b682

Analysis

max time kernel
598s
max time network
509s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 08:02

Target
Changelog.txt
Size 3KB
Sample260623-jw6eaabw2x
SHA256 c9f0504ccecdd2b4ccfae9c2af7a36552b37cd670ad2367197785bb67bd7b682
MD5 81e60fda7afa7ee4a58a516a11c7cff6
SHA1 7cee4dc93b39213fc08078c7571c8b1d67f0a904
SHA512 966953168bb8837da1c1db8c4e942a73388c71d19b487dbfeb51cd52d9162984c57c01e0f37fabed52603a3df4d3d19a58abd5c63f9a18960a97e930a9cbfd27
TLSH
T15151666D229BF27A17B200EE96AD3432875C5024EF35C16478CE834C71640A9B32E9DF
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1856	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Changelog.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1856