Overview
overview
7Static
static
3Release/emulator.exe
windows10-2004-x64
1Release/emulator.exe
windows11-ltsc_2024-x64
1Release/emulator.log
windows10-2004-x64
1Release/emulator.log
windows11-ltsc_2024-x64
1Release/emulator.pdb
windows10-2004-x64
3Release/emulator.pdb
windows11-ltsc_2024-x64
3Release/output.txt
windows10-2004-x64
1Release/output.txt
windows11-ltsc_2024-x64
1Release/server.pfx
windows10-2004-x64
7Release/server.pfx
windows11-ltsc_2024-x64
5Analysis
- max time kernel
148s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 02:25
Static task
static1
Behavioral task
behavioral1
Sample
Release/emulator.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Release/emulator.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Release/emulator.log
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Release/emulator.log
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Release/emulator.pdb
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Release/emulator.pdb
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Release/output.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Release/output.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Release/server.pfx
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Release/server.pfx
Resource
win11ltsc2024-20260709-en
General
- Target Release/output.txt
- Size 92KB
- Sample260808-cwpyzafr8x
- SHA256 464c76596c3610f8de1a83644641ed952c6323b1187e525b983bad2db65566d2
- MD5 127e04ebb25d8d4cdbb5068263a98c23
- SHA1 e34100afe09e69c84d0d8ff2bb691bf75bbd9c38
- SHA512 a3c4a1bfc33003682772626ec2bd7706768eff46acc11f0e469a4932cb1f26e3ab03e0a2fbc81593608f0505e53894b38311c2c3ee3a6701ef55959e642df590
- SSDEEP 1536:xo+HVbgacjaccqTzNifku3C5uwBpdCl8sl8lfzQdix8KAAe19MXZ+ETynDLxueCm:xo+HVbgacjaX+zNifkMC9BpdClXl8lfK
- TLSH T1769371B04BBCE5BAE7084453FF17DE683F29AA07E11F2E26151837402A6E75F2915B03
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5876 NOTEPAD.EXE