Analysis
- user interaction
yes - max time kernel
300s - max time network
299s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
03/07/2026, 19:41
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
GUP.exe
Resource
win10v2004-20260513-en
16 signatures
300 seconds
Behavioral task
behavioral2
Sample
GUP.exe
Resource
win11ltsc2024-20260629-en
7 signatures
300 seconds
Behavioral task
behavioral3
Sample
README.txt
Resource
win10v2004-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
README.txt
Resource
win11ltsc2024-20260629-en
1 signatures
300 seconds
Behavioral task
behavioral5
Sample
libcurl.dll
Resource
win10v2004-20260513-en
7 signatures
300 seconds
General
- Target README.txt
- Size 112B
- Sample260703-yeacvaby2n
- SHA256 15de4aab8d9ec1864d286f9007952d18919a4b1599d068ebedb3ede021d830bf
- MD5 779d0fad21b1316d1546477c8b6c631e
- SHA1 46d6d83025fab1e03b8ab266a32242e866405a60
- SHA512 9d5acb8c878b4822c88755503933ee31b5aafa8d706899c551a544465101dc407f45c96bd6fe52360073e8a207790130c898b5c91d8cba6d6636a803919ca679
- TLSH T166B0927F0455917AA90B02CB2521596A94B99625EB8D80518EE812DE17369A932291A0
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4056 NOTEPAD.EXE