43ae5c63d115056ba28bac561f3a9f310063883c17812e7a719f800a52bd0fd2

Analysis

max time kernel
148s
max time network
80s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/09/2026, 12:12

Target
rimti.txt
Size 51B
Sample260916-pdgwvsbj2s
SHA256 43ae5c63d115056ba28bac561f3a9f310063883c17812e7a719f800a52bd0fd2
MD5 ac28ed4edcf2f69d2d212750fe0b5657
SHA1 7d6553a1d5f9ad00ac8f2b339a6aea6acb86c9f3
SHA512 28237c66ac4649eab0aa6a7996695d805ef0735e5ff16f1b17c55809f4a19e76de936bdec037c82536e83cd8c10cad93412476e4b33273dd87d89118c57c0f43
TLSH
T13E9002D24C4CD5500602A84091029E598551429949597945D448C2452220957415DAC8
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1808	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\rimti.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1808