31be723fa07198d020307b6e64ea0eed6d10d5811edde7b9a4ecebaacebbce26

Analysis

max time kernel
149s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
05/09/2026, 22:25

Target
TargetDir/Help/EAX.ini
Size 617B
Sample260905-2cd5sstema
SHA256 31be723fa07198d020307b6e64ea0eed6d10d5811edde7b9a4ecebaacebbce26
MD5 1ca701fa1a58058bc9171e58af749b90
SHA1 df693b9ac374167fcc038fc1739cbfff0d6eded3
SHA512 f435af454e9a3d2fa5de3f02f6c7f4866a3038768b7711e75972f115c4f539c7824ac46d297b3ec7e21439b7462b2270457bd79c6e8779994c7ccad79e20f04d
TLSH
T10FF022928317EC58F24E84EA7689A3EB6438A38908D34A51D33CBD3C23126ADC522944
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2988	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\TargetDir\Help\EAX.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:2988