c39c8a424286a8ccb8aaf8e8006ce26eb9d5a153360c17e64d022e338e7cb612

Analysis

max time kernel
149s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 18:10

Target
Guns.lol viewbot\Guns.lol viewbot\README.txt
Size 562B
Sample260728-wsjsbssapd
SHA256 c39c8a424286a8ccb8aaf8e8006ce26eb9d5a153360c17e64d022e338e7cb612
MD5 a70367169ff8be3aaaf6477e264f4a1d
SHA1 10374a7cc1dfc709523a9529449c3c91751e1f21
SHA512 7425caa6dad3aa84ecaa8d74385da1f3c682814764ae73944edd2c18c12762b14c11160f2ac33b4f696f690329abcfac2d8a934795721a958d0a3dc85a96570e
TLSH
T1D5F0208B79C02BAB72E615B3F0811616C360A20E125454708C96E0CE087EF6500FD7DB
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2252	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\Guns.lol viewbot\Guns.lol viewbot\README.txt"
1⤵
- Opens file in notepad (likely ransom note)
PID:2252