3eb036b633e4c146b66878aaea0882ddc974911cf22bf789e3ef9f267ded5db7

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 10:39

Target
net8.0-windows/config.txt
Size 56B
Sample260812-mp6cgseq31
SHA256 3eb036b633e4c146b66878aaea0882ddc974911cf22bf789e3ef9f267ded5db7
MD5 e530e62995cd8bce3a3ea721d4525b86
SHA1 8852398e20ef3e789b5487eb49cfd724993b057b
SHA512 dd8096e17ab923fdc81c4fe30771064e8e1e7b97df04f2615a56a498f271584c294c2db42b1e118f271f041dd258b736e4d1e1d5e98beb541ccd7477ef2ab8a1
TLSH
T13E9002221655C5500949F630B62D5C64949F04051B550469A228163574D69C91A101B9
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4928	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\net8.0-windows\config.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4928