6eeb2c7a1e039d7db0cd1293f43913ad3efd7ab1da3ea93cf7dcb4012f474b33

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/08/2026, 04:24

Target
readme.txt
Size 139B
Sample260802-e1wy7as1hs
SHA256 6eeb2c7a1e039d7db0cd1293f43913ad3efd7ab1da3ea93cf7dcb4012f474b33
MD5 19badf1a7f14766a8ff9d6848732cf20
SHA1 b744649222623c2916fd135322501c4ba6365826
SHA512 c7e2e875fa0b94bff629a0cc60e7b588c76e75ba8eddb7b1625ec7a5d36144ba7cd01245e284a9c76be972c6a670f4316ab8c07420284a2d50044c4af77a2ec9
TLSH
T1C1C02B2F1084000F665008F1D35F000DEE929C150B108EE77060EC4C13F104FD3024C1
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3492	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\readme.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3492