cf13458e4156d9f6df9612e5d3aeace0a34a8aac00d6b5df478c965ff21f2966 | Triage™

Analysis

max time kernel
899s
max time network
464s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 23:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
asdsadsa.txt
Size 28B
Sample260729-3ley5ahn9v
SHA256 cf13458e4156d9f6df9612e5d3aeace0a34a8aac00d6b5df478c965ff21f2966
MD5 42e7e0a50fef7416f9d51d64aefc63f5
SHA1 d1124991560ceb736b72f8bde17fe52eade65632
SHA512 4528df2040ea1e2eeb0e47d4fdd2cf161e110d21b100417b7f8abbef1fd7d5efe8f8f42e748573f4057e96615e1a2a42e7c35c432f2dd92e2096b1157aaff7e6
MD5 SHA1 SHA512

Score

1^/10

ransomware

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4796	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\asdsadsa.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4796

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3116

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads