f0028cafa8c60b526c9cac55fc1aa2a2cafd2a97f538a91e6c0f92f4acff8db9

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
21/07/2026, 17:16

Target
DRIVELINK.txt
Size 93B
Sample260721-vs4bas1fjc
SHA256 f0028cafa8c60b526c9cac55fc1aa2a2cafd2a97f538a91e6c0f92f4acff8db9
MD5 9bc36e6af0cdd6d82d11e58cf9daea0f
SHA1 d998ccfc164e126281456a360a1675cfa56b96ce
SHA512 03e432b726bc5a9882d5a6c48791bb8b640b88fc50a2f5984192341f803ea3d0f6f2a7e6f4c594fb1ea8a6ccb1f329007abe01a347f2c6876169d9e0c08731e5
TLSH
T18DB0127324447507EA744EE22403BD095C340645ACE98AC0D030537380015189962894
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2388	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\DRIVELINK.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2388