2d2939e93239ecf719252c8e75a6f3bdcd86e3704873ea21f153495a4244932a

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 04:45

Target
instructions.txt
Size 38KB
Sample260806-fdqdkatblg
SHA256 2d2939e93239ecf719252c8e75a6f3bdcd86e3704873ea21f153495a4244932a
MD5 b586f1ec6086e6c24261a84d0c38a135
SHA1 3427b97da0c1a9a72be5729c7417e7203a24b7ae
SHA512 d95115cb629d33e01b180f7f691a0dc16325d03a14a02c23224be75894cd48385ee20e353d0dffc793b93073a0b6d15fee80cfb05d7fad3fea447684bf19a06c
SSDEEP 768:hGFMa4PcpWnvNawGbttAkte/dLCv0TOGSpciRAOj6:IM0g0PbttAkte/0v5GS3KF
TLSH
T13503075FF785133906E70250760FAAD3F32AC06C231542A6B86EC15C37657B9927BAAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2780	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\instructions.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2780