6de3f2bf8a5ff4ca2fadaf4ddded8e5e25e45e1b302c324adce9f8a449ccc4e4

Analysis

max time kernel
899s
max time network
538s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 14:25

Target
tinytask.ini
Size 138B
Sample260627-rrnyfabs5w
SHA256 6de3f2bf8a5ff4ca2fadaf4ddded8e5e25e45e1b302c324adce9f8a449ccc4e4
MD5 90f3f71f6c3f666a04695f00ee321718
SHA1 b9cc7d531967ebeb885c5c89b666677a04137e3a
SHA512 14b94dbf0bc153c9c0a93db3cdd8c08c0b57259a68346d0b536c4a4cf629e569704d4d7712571c0e93603adb2b05cf4c60506246a9d31ab4be58cea7629a9cd8
TLSH
T132C08C18BFA04022E132309247712A9A11C88110082469009A0D30D82C8B59F89091B4
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4420	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\tinytask.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4420

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:940

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2016