b1759d642217cfb59879dad9bb46ead74f0d6a3e5051db58795b25296776a9f9

Analysis

max time kernel
300s
max time network
188s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
09/08/2026, 04:42

Target
A.exe.txt
Size 3KB
Sample260809-fbtyzazhpe
SHA256 b1759d642217cfb59879dad9bb46ead74f0d6a3e5051db58795b25296776a9f9
MD5 b89eb1ee57bd0016e71b699e9eee151d
SHA1 7ac9fb46abd250f6b3f8d65abfc552e96b1cb657
SHA512 e64caf38c0aa05cfd25e9903528dcb87bfe7919cc80968048850511501ec933b37908af0b52d85ece495f1b4a54b857af252b6b996e20185278bde227bda9469
TLSH
T1C5714229B568996BC495C75F2E3AD174F289B1AF79206C09B48F1230074CFC1B17DED9
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4864	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\A.exe.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4864