4d1def87e31e592ef24c3efe0ca7bc4518bbf7d80fc2b3e632819c8023cf8086

Analysis

max time kernel
300s
max time network
206s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/08/2026, 07:51

Target
Installation_Instructions.txt
Size 1KB
Sample260806-jqb89afr21
SHA256 4d1def87e31e592ef24c3efe0ca7bc4518bbf7d80fc2b3e632819c8023cf8086
MD5 a5d0450662cd2c52a9dba3903f32e4cd
SHA1 29ac486b10b015be040323260367c4019564c427
SHA512 8acf1d13236f186acfa088a462d2a51a530add22dff4601aef4cadffc096a8963fe3a7e955a23241db021da936cbda0551b4540ff8fa2696ec1f0feead45a377
TLSH
T1CA31F14DB698A32927924F4766323D8291539440E3454884BFBEA0C8DF3EE60CFB2B47
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4328	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Installation_Instructions.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4328