Analysis
- user interaction
yes - max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
22/07/2026, 15:24
General
- Target plain.txt
- Size 103B
- Sample260722-stecfstyhv
- SHA256 0156db8cb60e336f8b6e32ab72989aefcdccd9a14ff5b79900c7df56a4df5445
Score
7/10
Malware Config
Signatures
- Suspicious clipboard content. 2 IoCs
A suspicious script was copied to clipboard.
- Opens file in notepad (likely ransom note) 1 IoCs
- Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\plain.txt1⤵
- Suspicious clipboard content.
- Opens file in notepad (likely ransom note)
- Suspicious use of FindShellTrayWindow