Analysis
- max time kernel
899s - max time network
463s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-it - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-itlocale:it-itos:windows11-ltsc_2024-x64systemwindows - submitted
28/08/2026, 18:37
Static task
static1
Behavioral task
behavioral1
Sample
astermail-recovery-codes-1787816610040.txt
Resource
win10v2004-20260513-it
13 signatures
900 seconds
Behavioral task
behavioral2
Sample
astermail-recovery-codes-1787816610040.txt
Resource
win11ltsc2024-20260709-it
0 signatures
900 seconds
General
- Target astermail-recovery-codes-1787816610040.txt
- Size 818B
- Sample260828-w9y9casckc
- SHA256 cca804dbe619c6c1a5dc53dc86e1b7c146bcf3ca3473e9e99ea1edc8756d83d2
- MD5 f165b7565822c439a17295c6785b865a
- SHA1 d80cfd3ecb7d0cc0bcd7649e917e46c63a8198e9
- SHA512 335ed39de4f1005e60a0c161b591273e39d1de1fa6c33ff1185902d9b4b48be72ad26e2fead287dcf744d20506aaa525ee42a55c85b7877c653bb040582ffd8b
- TLSH T1C801895A2A9DB808094534BE6547EE5F35773499D642249C28B2234C22E3C094907886
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\astermail-recovery-codes-1787816610040.txt1⤵PID:1328
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4572
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:2080