d15cf39fba2c0462725562e7a869bb53aa74dc0f32e7481edc1a67a4879f9bd1

Analysis

max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 16:07

Target
recirkuleres.ini
Size 169B
Sample260916-tkp82adk4t
SHA256 d15cf39fba2c0462725562e7a869bb53aa74dc0f32e7481edc1a67a4879f9bd1
MD5 2a58ed802023b61d48a30969bac2ba4b
SHA1 39a2cb244a31cb4b99774d7d314b543c0bd92c32
SHA512 5d8b98e43af5d0ce4a40ef9ac998948f4758da4c53a416587f6e92a68fb741caac0ae14bf7d57aa4125920d531d584200340da21a29832136a0cac14b9b06a97
TLSH
T191C0C0161C9734452FE4D71441500D8221F00B61E6F3812230B38321D200320006202F
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4328	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\recirkuleres.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4328