5a7b15f43785196b78da393bc48d6c566297c4490ccaf6b48dfc38423edd7956

Analysis

max time kernel
149s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 16:15

Target
_About.txt
Size 2KB
Sample260702-tqa2asew2k
SHA256 5a7b15f43785196b78da393bc48d6c566297c4490ccaf6b48dfc38423edd7956
MD5 a79a9083a0ba728c919f9cfe618ed017
SHA1 b121232888f1e7f0c1ac64a7e268c412a14548e1
SHA512 0d81a9f8ebd0dd98e3e85f57f936091f8e0120b4caeb9839def03eced408ac07391ce5e7ac6ee1213b194de10dd66e9b074e8019ed1b19659f5088a12c2c9d00
TLSH
T10741236005C61DBF65117207CE1D6AC8FF5924FE37B6532D35A03A2A21FE824863D9DD
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1252	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\_About.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1252