Overview

overview

3

Static

static

1

benign.txt

windows10-2004-x64

1

benign.txt

windows10-ltsc_2021-x64

1

benign.txt

windows11-21h2-x64

3

benign.txt

windows11-ltsc_2024-x64

1

benign.txt

android-10-x64

benign.txt

android-11-x64

benign.txt

android-13-x64

benign.txt

android-14-x64

benign.txt

android-15-x64

benign.txt

android-9-x86

benign.txt

macos-10.15-amd64

1

benign.txt

debian-12-armhf

benign.txt

debian-12-mipsel

benign.txt

debian-9-armhf

benign.txt

debian-9-mips

benign.txt

debian-9-mipsel

benign.txt

ubuntu-18.04-amd64

benign.txt

ubuntu-20.04-amd64

benign.txt

ubuntu-22.04-amd64

benign.txt

ubuntu-24.04-amd64

Analysis

  • max time kernel
    899s
  • max time network
    464s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 20:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    benign.txt
  • Size 22B
  • Sample260813-zawkysfl4y
  • SHA256 4d297b1bbd1a6e10020463d332fd133449d7899573ee682d7486bfb2171031ca
  • MD5 SHA1 SHA512
Score
1/10
ransomware

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\benign.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:3856
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:5776
    • C:\Windows\System32\SecurityHealthHost.exe
      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
      1⤵
        PID:3928

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads