Overview
overview
3Static
static
3file_d7081...00.zip
windows10-2004-x64
1file_d7081...00.zip
windows11-ltsc_2024-x64
1entry_1_0/cmd.exe
windows10-2004-x64
1manifest.json
windows10-2004-x64
3manifest.json
windows11-ltsc_2024-x64
3script_output.txt
windows10-2004-x64
1script_output.txt
windows11-ltsc_2024-x64
1stdout.txt
windows10-2004-x64
1stdout.txt
windows11-ltsc_2024-x64
1Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/09/2026, 08:34
Static task
static1
Behavioral task
behavioral1
Sample
file_d70815453d574d3b8c8f9501bde6c25d_2026-09-08_08_28_53_917000.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
file_d70815453d574d3b8c8f9501bde6c25d_2026-09-08_08_28_53_917000.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
entry_1_0/cmd.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
manifest.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
manifest.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
script_output.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
script_output.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
stdout.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
stdout.txt
Resource
win11ltsc2024-20260709-en
General
- Target stdout.txt
- Size 722B
- Sample260908-kgpcwsvxdy
- SHA256 bf9388cb909431f9aedfe9e3b42a3fa94fe7538c0cdc1941a4a35ce676e97208
- MD5 9e85a27cbe920f0de9502fea30d9d5a3
- SHA1 d027c3d6689eec7880353d0a6c69efdada58e2bd
- SHA512 4abd3932c9e14f167f4085ecb0d91a0237a12cf3baa6078450ab27f5f8cf94903b10974bc7c55aeaa4d4a3f02a280724bf7d06aaaa19ed9d53a251d3b45b6ef6
- TLSH T1230110300CB21768DB5640D906BCC26AD7D1D528A2EDC298F9E841CDCE01FEEC3F8A18
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5812 NOTEPAD.EXE