716dcada86d975cd17a74e3a3bf41994adbe6730e4e2f38598e637db1a2126be

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/08/2026, 01:03

Target
GUIDE.txt
Size 410B
Sample260831-bec3easgpb
SHA256 716dcada86d975cd17a74e3a3bf41994adbe6730e4e2f38598e637db1a2126be
MD5 f7810593c163403ab92a7acadba43b68
SHA1 692f594059045313ecc4fbdbd5cd8a71a490eab3
SHA512 911f1330bc080ea55b0813c0334068356fd6316a2388d149fd21b3b5d61a8a3459e308511e23323536a8cfbe96928b4819cc20758b3c341d17fa56387ae173c2
TLSH
T130E0F80A4EA242300EB8C0830E5E84D8C30A28BE3082404568BA00993BAE299923E2C2
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
788	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\GUIDE.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:788