fd90480a6a2741b8c4b97733daa5194044d9e8a875c1069d0aec6b79cbb0689f

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/06/2026, 02:57

Target
OPPW4_PATCHER/OPPW4_PATCHER.ini
Size 232B
Sample260625-dfwl9ahs4k
SHA256 fd90480a6a2741b8c4b97733daa5194044d9e8a875c1069d0aec6b79cbb0689f
MD5 6627e781d3162d67570da81d067baa2e
SHA1 2f70a594d0f46c1011e77925c1cde67b0cd74d7f
SHA512 e42eee4e09806dad8a6918f767580c6a55a74784630ca5f023c1e4185f3be07280300c49661689f8f845f4f4cd6fe1064c6e4b8390150cb1578570608aa70bdf
TLSH
T143D0A79F0F18046F5A9214435F0593B3B12CA10D78EF06206B54D635718F024A49E83D
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2812	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\OPPW4_PATCHER\OPPW4_PATCHER.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:2812