dce2ef7095271d067e74e8f191113153edddfbddc1d04c19fbe729a4d156be72

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 03:46

Target
temp_extract_dir/hash.txt
Size 159B
Sample260730-ebxt7acm61
SHA256 dce2ef7095271d067e74e8f191113153edddfbddc1d04c19fbe729a4d156be72
MD5 bc78622474b13babada0e5a7c0e65ef4
SHA1 c605f4dace5a9441207f61cd13556f5f80b757e9
SHA512 05c1a7ae7005db608693be943d59ed27cede1fbdc7716622a2226cb463481298cc12757e0fc3504e85024f053589b000deb8e4a3606ef3a34bb0e7e81f86c0fa
TLSH
T1F3C02BD68389C59597608B27778C1B40C3422C132053290CB0E4C57526D40BD333C4EC
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2108	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\temp_extract_dir\hash.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2108