517ad37fff3b852a55aa7aac2c02dfbb5f1116fbe3d74c1a4ab3ac2132fd91f2

Analysis

max time kernel
899s
max time network
464s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-fr
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-frlocale:fr-fros:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 16:49

Target
ReadME.txt
Size 98B
Sample260730-vbraeasdqa
SHA256 517ad37fff3b852a55aa7aac2c02dfbb5f1116fbe3d74c1a4ab3ac2132fd91f2
MD5 26590565d252e1e56a5bd55c6723d051
SHA1 42fe98bd6415cf3431e7e6e17593ca27f80aad6a
SHA512 62d58f3d421b0d17ec7bd89896cae4f4d534c4babf435cfea61a0ab375caf3610f7cf8b7c5b178f05d2e28c8e45060e12f8d841f525a768a270fa49a7eb73d27
TLSH
T134B012D3D20A843223C0B4403B0921E0954B480CB147C941FD21D07D138408C8961ACE
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4404	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\ReadME.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4404

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1224

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4156