288c2a793b56b866c9daeee9b1b341642af6998e1e85ed821bddd6c71f3f78d7

Analysis

max time kernel
58s
max time network
60s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/09/2026, 09:47

Target
00_MANIFEST.txt
Size 1KB
Sample260907-lsavbatepf
SHA256 288c2a793b56b866c9daeee9b1b341642af6998e1e85ed821bddd6c71f3f78d7
MD5 0763999239d9078a161690f1bf728558
SHA1 dd6512e59c6afd896d929be74ee16488fbc41e0e
SHA512 f6c0613b73b2add793c9ff4d7acf5675577840c5794b9a00143a44273c55f878a9d757768ca5f4f4832c6472da5455cf48f1fe95a58a7c900fc982eca0e68df0
TLSH
T1EA31821A2CC1027C358312E67B1D8AC69202207EA75215583AAE022CBF30B27B2F59F2
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4772	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\00_MANIFEST.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4772