439c84325310333501f7f2da6f396b208259ce4fbbf870aa0503bef1d6089fe4

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/09/2026, 08:34

Target
script_output.txt
Size 312B
Sample260908-kgpcwsvxdy
SHA256 439c84325310333501f7f2da6f396b208259ce4fbbf870aa0503bef1d6089fe4
MD5 59464bc3abfe0db53ce753f0ac10dace
SHA1 48a6446123d6b7e64676f50ea06eaeb8e968dd4c
SHA512 68529ce1e800121fa3d1d65f6c23cdca7d8822160ecef7d47d41161d86b7b5d71fd3eb25a212f5a1f2fc5d28197d261fe619611423caf51d2ba00b7695639e9e
TLSH
T114E0C23A5936D01FDAD0B6282D820EA79300A0E86752DEE683C92290D0D493D9176C39
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1816	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\script_output.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1816