b7e22dedfa1f10d8b8d73923dd785d6caf6b39b7d13809543de26f4dfc0b878a

Analysis

user interaction
yes
max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
13/08/2026, 23:25

Target
Signal.exe
Size 224.9MB
Sample260813-3ecv7a1amd
SHA256 b7e22dedfa1f10d8b8d73923dd785d6caf6b39b7d13809543de26f4dfc0b878a
MD5 10233c3f9ed57f138b7fe4ddaf80e9ef
SHA1 ce6c3af6b6ee87deab6ca2e0b097f03110ba7ca5
SHA512 897fd5312d8081b1dcb1b3449ee7ce4e268457d7813a68f75fc6e4b7cd47f87b512a35708fafb53b8e697fa254ccc17491a96a23df09457b94ade455bf22e02a
SSDEEP 1572864:cXT66K7b/+3j8AfBGK6lXimTvjuChy24T0iEwfBdEjtef0NrU+TsOtNF4mJ+72Rz:IK7b2QAlx3Wy7iEQ
TLSH
T103B88C03F29A41D9C05DC1798B5B9633FE71B8494724A3DF2B5447922F66EE82B3DB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3476	NOTEPAD.EXE

C:\Users\Admin\AppData\Local\Temp\Signal.exe
"C:\Users\Admin\AppData\Local\Temp\Signal.exe"
1⤵
PID:4844

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\kacper.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3476