Analysis
- user interaction
yes - max time kernel
149s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/09/2026, 12:11
Behavioral task
behavioral1
Sample
VMProtect Ultimate v3.0.9 Build 695 Released.7z
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
VMProtect Ultimate v3.0.9 Build 695 Released.7z
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
password.txt
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
password.txt
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
vmprotect_88996417.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
General
- Target password.txt
- Size 43B
- Sample260916-pcnb9axyew
- SHA256 5d8c416263e6cfc2e8bfeacc7b2ab08cfabf90439e9cdeede5f50a989f2ca5bc
- MD5 533d8140960d48027d9d051fc1785e3d
- SHA1 4aedb93d0f178de14f2aaf0679b01092b8adf96a
- SHA512 6e39a23ed303f6b14c15da74d183f21678a9365bdda0fb61a054141726a8f3a0f971ee4b6b37975c61e40c68236261c4fa362f88975816097b32ec73d3fd3a7b
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 5736 NOTEPAD.EXE