539a01f06eddea081af0cb677219fa9b6d122c77b7168c7befc99a6a8e9daf1f

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 04:15

Target
message.txt
Size 5KB
Sample260706-evdknahw7s
SHA256 539a01f06eddea081af0cb677219fa9b6d122c77b7168c7befc99a6a8e9daf1f
MD5 2a6b0c211700cf3a5748f41285211e4f
SHA1 aa0cb38ec0d363acec6abe336076f551b9188b69
SHA512 3917050efe9b95c92b9cf9588a3c1dc41f4743cb5f752b613c9ab0d4412bd302c2d0968c31f8769cb181537cc375479db222929fea216799b300a37f4a1cf806
SSDEEP 96:v4OTveZzvcqd+MRNE0R7Tf/AyLFs4NWNrL2G24FQJEKk1GT1D1ZoR55wcLZAx:pCNp7TJe4NKrL0zJE3gu4Vx
TLSH
T15AC1E92BEE5692350567C317F20A72D0EF39A0A20704345CAC7DA12C9696ABE037D59E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2852	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\message.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2852