0757f6638041fe9b4ac0a75a7173fa7cc7f7d82c0401513c5b097a1d986b20da

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 04:36

Target
nhay.txt
Size 12KB
Sample260714-e8d4caet8n
SHA256 0757f6638041fe9b4ac0a75a7173fa7cc7f7d82c0401513c5b097a1d986b20da
MD5 3f6de0951237e0168181eecfd9062627
SHA1 03b44c8643000b2300279948bde7d2967a2f2df0
SHA512 42413d382e8a2f510e485eaf9d5d1ac0cbbbf56c01042cbbe161d24540e96102a08c717bcdc46195852d471a907fc6e2360cb6d949a80aef21ee9ad99bddeab3
SSDEEP 192:gka/AVdoO8b7MUmng+xQLMfRf6iF2Gp9CItwBCEv3Dur1gbcoVFGhtQ3iF2Gp9B:DcXmngHC6ApF2CE/O1gAoVFGg3ApL
TLSH
T1744225D333607231907DE429D6AB84045BCAA42BD7FCD6A691E4393A57A30839E33967
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3540	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\nhay.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3540