956f4cc78b7a899ea76cb67c4bbedde1311fec7615f30bdc1c5af6dda739b131

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/07/2026, 21:53

Target
main.ini
Size 4KB
Sample260726-1rn3wasapf
SHA256 956f4cc78b7a899ea76cb67c4bbedde1311fec7615f30bdc1c5af6dda739b131
MD5 c94308e1d5c40161497e39f3b768c452
SHA1 dbb5f6e0fa19ef2f8675c257cbd0f70afa3aa326
SHA512 3219b37f0b46fdc6c66666607b3d1801d047e6a1bba596457de539f3106847ff5b08540cb54cebc7153ad10eafa3cdb5616d1e959df315da13ced184b0ad411e
SSDEEP 96:38vcVbxLPdLB3fdvKSEnQRkB6Ip1ImmoM:38Cxzd93f8SEnNIy1ImmoM
TLSH
T12381496366E92129F1A3BADADFDEC0BAC715B8E8525F8D6E10D5020B45DC8405E03FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1096	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\main.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1096