9771c4fa747d007d1d6f6f7f539e8a75b46352d81147867e51d2543871ce76b5

Analysis

max time kernel
300s
max time network
279s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/09/2026, 19:58

Target
1.txt
Size 670B
Sample260928-yqa4hsch87
SHA256 9771c4fa747d007d1d6f6f7f539e8a75b46352d81147867e51d2543871ce76b5
MD5 eaa6be8274e93a591028e584976b868c
SHA1 dd84f7fa479c52b284dcd276e5ebdc23c22478da
SHA512 9afc98b991594cd630035b02f0160d828e52b2f85c4224da2f41015e21780cb741112c97df98281523a0254c0391d45e3b5bb03d00db2d6eeba60db812a172e4
TLSH
T1C20123CA47977F9F2592345B301C7D0DE9D634C228B43A7443594A56A3A70B65212CC9
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
6092	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\1.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:6092