63a6c8c4d0102f0cfbd914c279a0cb8bb626fffe1fa8c85e488f9de563c10441 | Triage™

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 13:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Custodian.txt
Size 14B
Sample261027-qq67ysdf69
SHA256 63a6c8c4d0102f0cfbd914c279a0cb8bb626fffe1fa8c85e488f9de563c10441
MD5 b3fc657f6d2a914989711269792d298c
SHA1 c144ab5913b9b95772d7b68c2376cc0257fc3d72
SHA512 2d80f561730563c2cab26b93d327b8cfaacc9b3b5349fcd079ab43f8bf01fd85b74aa424846522abc56b0dd5bd606c83d5c6bcbdc20f451064fbf5f31d894ad7
MD5 SHA1 SHA512

Score

1^/10

ransomware

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3336	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Custodian.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads