329021f1146e9a25923bf923f67c1ff79f5d4890ac47c750a060f2a8c9caeed4

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/07/2026, 06:13

Target
license.txt
Size 1KB
Sample260721-gyrmsshx4v
SHA256 329021f1146e9a25923bf923f67c1ff79f5d4890ac47c750a060f2a8c9caeed4
MD5 d91ea03e4a86c868157e7af8960cf76c
SHA1 f6440f8c3f91152f588b294eaf8d128f86b730d2
SHA512 77830d65466fc2c8376901d03c75359781ee6153b8577d975b97cf9ca1c41caa2cd8f52b8df900af10d52c0adeb8f2b283f86871f2ac52da1ed863cbf3a39cbb
TLSH
T19331529E378D43B629F206C7A95BC9C1F317A650BA9F1992305CC27C2282B5097B00CD
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4636	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\license.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4636