2c31cf806a69587b053ddbebbd0dc612bcd7f7f2311346f3dff452b654e59837

Analysis

max time kernel
148s
max time network
86s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 04:36

Target
reoten.txt
Size 119B
Sample260714-e8d4caet8n
SHA256 2c31cf806a69587b053ddbebbd0dc612bcd7f7f2311346f3dff452b654e59837
MD5 232f54d55d1f3119e8aa3ecda88d2a98
SHA1 78cbf7f51d68d5dc3a5ff272fbc72bb82eccbca1
SHA512 3c833e93eb175056754e1e355076295d2027f0e288f84de06dc2bc70935caa262257d0474abce481ff1339032d1f463ce46f9b1ceff7dcea9b64dbc77d05c1bb
TLSH
T172B0128703563B018C484D2584970A099F84650EC3A175BC54FCB53935F00C61E79E68
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4876	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\reoten.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4876