98961f76568e1132f3bf556a318597f642c88a86bfcba2aec38e72d635f66268

Resubmissions

24/10/2026, 19:02

24/10/2026, 18:58

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 19:02

Target
NINJA_AOB_CODES.txt
Size 9KB
Sample261024-xp6y5aby2s
SHA256 98961f76568e1132f3bf556a318597f642c88a86bfcba2aec38e72d635f66268
MD5 137c50ce8e5134996e2417e835cfafbb
SHA1 16d79957a3161ee405c10b2693c232c5749d6f11
SHA512 744aca3f8ec04365446de096d45eed8c5943a386cd1ad4e3da6980259f9aa751d35da7c72e77e302f1870b3cfc40f5852b58af2032d9cd0b3071a47d0eca8bce
SSDEEP 48:Nnh5+N5n5/758i5a5H5zN5b5mnQIrfy9PLwrNKDONiD3yNUgAZqhPQirsPsxwl2K:dk89zIYDOYDC0Ewl252lXOQL
TLSH
T130128948AD965949C176FF0E183171A4D1103CDBB4F227DFB18E5B90EB5AB2D12EEA02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5068	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\NINJA_AOB_CODES.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5068