08a841e996781e9e77d30a4e4420a8f501a280b00624e6d1224bf54aaff73eba | Triage™

Resubmissions

26/10/2026, 22:48

261026-2raqxshy6m1

26/10/2026, 20:59

261026-zs8y1awv4m10

Analysis

user interaction
yes
max time kernel
898s
max time network
461s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/10/2026, 22:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
nigga.txt
Size 5B
Sample261026-2raqxshy6m
SHA256 08a841e996781e9e77d30a4e4420a8f501a280b00624e6d1224bf54aaff73eba
MD5 9271d6eecedd55fcfa6143a33029d496
SHA1 f8a17e958f70b7990df493f4a53a36a67ba9163c
SHA512 5b8c9526324e5388e6fcdd0b4fb6428fe743240abffa14d5afe2166cb0c76ff176bacfaaa1f23ff57cde233d5e4f736dd8dcc0dace63b5fd36c8444acf709cc8
MD5 SHA1 SHA512

Score

1^/10

ransomware

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3396	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\nigga.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3396

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1940

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads