03a1a41cd2c4b5ed42496ce4963dd04b00f6ed7677325e1084c103c26645c552

Analysis

user interaction
yes
max time kernel
333s
max time network
337s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 20:18

Target
info.txt
Size 256B
Sample260801-y3ebpsfp3w
SHA256 03a1a41cd2c4b5ed42496ce4963dd04b00f6ed7677325e1084c103c26645c552
MD5 adb706eea566c35ae98f0647568b4b4f
SHA1 e8ff9412191e0506bb96084240f09685d9998e84
SHA512 a77e704f305c3037dba19936fc32d16e3612c25f02bab9a693c4b1e7ac24c185b48709b0d2c3082ae20b505e89e01df61850808e0f48bc77afe7b25608016cb0
TLSH
T1CED097F30D080889081E02CC2D60B332433A50C57ABA5CA2F1CECDD293033A23178ECC
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1760	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\info.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1760

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4948