075e98e3aed0c34d6093401776c687d2c4763036896ca27f7d875985601bbf0c

Analysis

max time kernel
899s
max time network
466s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-uk
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-uklocale:uk-uaos:windows11-ltsc_2024-x64systemwindows
submitted
30/06/2026, 17:46

Target
4121243125387324.txt
Size 73B
Sample260630-wcdalsd19x
SHA256 075e98e3aed0c34d6093401776c687d2c4763036896ca27f7d875985601bbf0c
MD5 dc19df9707c0e743e96b713a9025b4c6
SHA1 a5eca7ac11f5170c8d02c5496f2dafd1540e1423
SHA512 3c24557088f61ea5ba34bcc7aa2b298ceb60a4fed769544c1a3f5904fd9be44ff1d478e8350ed6adb8b6e299b3117cafca44d131af3ff173430e22a73abc37ee
TLSH
T141A02223A080000A8000A8C0BEB38088032F020BCEE22080EA02BB0028B2030B0CCCEF
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5872	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\4121243125387324.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5872

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3852

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1544