59cb4be2a00b6f3ecb9b11d3d47195eea13216419f8dd4c4f8e0cae4742e9cc6

Analysis

max time kernel
394s
max time network
385s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-uk
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-uklocale:uk-uaos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 22:53

Target
pass_for__arhiv_21.05.2026.688.txt
Size 1KB
Sample260722-2t8qqsdb46
SHA256 59cb4be2a00b6f3ecb9b11d3d47195eea13216419f8dd4c4f8e0cae4742e9cc6
MD5 cd9bf606be1654d6299f598a2feceba0
SHA1 5b6f95bd9865f16e73846ac171feb9ce11ff39bd
SHA512 90075285c9c7b6733741f8e6e1c76109cb351f9c7185c61e3de5ed62cabfde605fc346071e42b256d023bf0b7ef0211ade30108bf9cf4935a65ff1f99aa3fe84
TLSH
T16E31D271611973643615EC8D4470ED1A9B9A34F9F1724201B0DD3DEA2FFE821ED159F2
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2492	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\pass_for__arhiv_21.05.2026.688.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2492

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4136