3e9fa55bb75f65372eca32525353befb6b87273a1789c81916cfdcc39d265627

Analysis

max time kernel
149s
max time network
146s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
03/09/2026, 14:36

Target
INSTRUCTIONS.txt
Size 176B
Sample260903-ry3eeahh29
SHA256 3e9fa55bb75f65372eca32525353befb6b87273a1789c81916cfdcc39d265627
MD5 c82a175d3eae303dcc0d42f9b34a1f70
SHA1 235719f854747a3d4a01c4f9d53c05c3fe061d2c
SHA512 2b9c1db4baeaccc1f72a72c666c315bf99b7314ef385afc029d2f719d849bca92d3299c3c543d11afd189952fcf201e77db444666148624981477d10ef8b8ed6
TLSH
T11DC0C00ECE42508218006B94E3C10D480F00C0EC6EAC22F60ECD1028232F31280FC32C
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5064	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\INSTRUCTIONS.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5064