73c4be579bdf2edb5ede295ddecdfa15efb7cfa85a14b49f1970e57f48cf81da

Analysis

max time kernel
899s
max time network
461s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
29/10/2026, 21:48

Target
SaimoTV/LEIAME.txt
Size 1KB
Sample261029-1nsa5ace68
SHA256 73c4be579bdf2edb5ede295ddecdfa15efb7cfa85a14b49f1970e57f48cf81da
MD5 a06208d2d85cb25b7d3820a40d10e818
SHA1 98d36237407f4ef74e4d34386c46bb59988a3160
SHA512 046449cf0ea9f1fa6489c7ca57cff4a6a688adda1181f384fe328de038de57bb54608bad0b4cd6c3dc2fcf8c572c987eb5ac2137107257ce4d9a22a9315daedc
TLSH
T1C721951E0E9813A3792263E2FB07CF2319F481865507DAD5C03F078A78C4A46D53B5B9
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2852	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\SaimoTV\LEIAME.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2852

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1820

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5092