0c4fb51ab588b1b792a5857a887b9ef94d6086e1e9a3aab1762391a452b2105c

Analysis

user interaction
yes
max time kernel
10s
max time network
10s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 16:55

Target
Glm5.2 (3).txt
Size 28KB
Sample260809-vfhttsam8y
SHA256 0c4fb51ab588b1b792a5857a887b9ef94d6086e1e9a3aab1762391a452b2105c
MD5 84ea3f51a16910918b7a39f55afb856c
SHA1 c8eef254ebf540853f18b2fa15d37f5a52bfbc1d
SHA512 2278c55712d1c955ff524a3861c208029122c735c1c9a1abe3e11b900ed69a8ec7304bccb097d5764a389149b24b3853eb1323289e3355bca3a241430d4327f1
SSDEEP 384:5Tiq4vpWz6vdtOwcdSaKXgW6pfjyFBiCRbQm9J+OGEuPcv51RDwN6x0VxYpOzIfi:CpWuvdwwUww1ZmfPYcv51Zg20fY8cj0
TLSH
T1C0D20A5FF7C0223912E74250760FAAE7F735C13C631052A2A86ED15C37657B8927BAAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1236	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE "C:\Users\Admin\AppData\Local\Temp\Glm5.2 (3).txt"
1⤵
- Opens file in notepad (likely ransom note)
PID:1236