45a0c57813fedd5825f0b8b9395d136da06e80127495966c106f2ecbb1d86a2b

Analysis

max time kernel
899s
max time network
463s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 15:28

Target
babalar.txt
Size 182B
Sample260723-swvgfssapg
SHA256 45a0c57813fedd5825f0b8b9395d136da06e80127495966c106f2ecbb1d86a2b
MD5 67f42232046223cdf9fc4f3be62ec523
SHA1 600d3e31be8290ca9e0dec16a6fe597ea866b8c3
SHA512 c04f569da5a2a31b9b0d807d79921ac0490b45ab79803b857958b26fc8727de0752d785a1305cd80ec750bae1769d64b76a656ae5afdff93e20e13eec8d26c11
TLSH
T175C08056C105F4E3500E4D8845742CFF42855141D0875F79851CC77DE68775A6485D1E
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4416	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\babalar.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4416

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4664

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3940