ecfc21483ffa250915a7e935ecdf27f6d50bd3e17203a67e50605f231a3551fb

Analysis

user interaction
yes
max time kernel
56s
max time network
52s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 17:29

Target
Odin3_v3.14.4/Odin3.ini
Size 328B
Sample260809-v2v2aaar8z
SHA256 ecfc21483ffa250915a7e935ecdf27f6d50bd3e17203a67e50605f231a3551fb
MD5 78d8a90f30b397829ae6ce6e91217adb
SHA1 4d36fbc270b9be07489cbe48e06e7167d4b95d1c
SHA512 430a5ca29fff7ef6a3ace23ca7e08e2018e1863e696375a89ebca76cd5efb6f9f1d2e0e3c0c567500fd26061b5d2f00708c895a46743a0e2a5857c6e9f9463a2
TLSH
T162E07D364616D50CE0F790E410B2160070F3432E507C60736C16D90EBC5160EE1FF543
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1460	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Odin3_v3.14.4\Odin3.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:1460