19404e184cf45ec991b54e1e6f05f847ad8f13fee2a51f3a2d9a960c8f7cb26b

Resubmissions

23/10/2026, 14:05

23/10/2026, 14:04

max time kernel
149s
max time network
142s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
23/10/2026, 14:05

Target
vtfedit133/GPL.txt
Size 17KB
Sample261023-rd28xab151
SHA256 19404e184cf45ec991b54e1e6f05f847ad8f13fee2a51f3a2d9a960c8f7cb26b
MD5 fdafc691aa5fb7f8e2a9e9521fef771b
SHA1 1e492d0d7c3ea5c426d38ef46715fb6e30f9988e
SHA512 002415576d891ac85a2450b13a3e6db7e0e7651c261fc4a87a96e0d69e2135d27b513895af195b465bb79872fb9cce8aa1284d37cc543a10a0754f687ac6de65
SSDEEP 384:9q2PmwEPb6k1iAVX/dUY2ZrEGMOZt7o0sDx2:9zuVLiY+rTZo0sDx2
TLSH
T17682A41E770543F20AD202916A4B68DEE32ED4B9723E11543459C1AD337FE3583BFA99
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4852	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\vtfedit133\GPL.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4852