98235b2c01b0bb586b3d8f6852848004abb5a2b6d4eb867d8afad61d253aa59b

Analysis

max time kernel
149s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/10/2026, 22:51

Target
SecretTweaks/SecretTweak/Bypass.log
Size 315KB
Sample261030-2tatpsff95
SHA256 98235b2c01b0bb586b3d8f6852848004abb5a2b6d4eb867d8afad61d253aa59b
MD5 40eadcb818e1b91d6715309c5f380f82
SHA1 ccd3454a3f43897e64043d2f7cfe578907c0d7ce
SHA512 18e1a373c147e004d4394345d50cfdec7e86a270be9d8e563e85972deb9bc463279ecf7bf8f3b779da9945b9245b54e0726baf2bf9fcf7dd3c2b53312a270a56
SSDEEP 3072:kFmCFJAIjAx6Uqq/RaGpbryRtRwL+3bNQNEhohJxvFUl23Bvvt349k4Vm0QKecKr:j
TLSH
T16764E0866FF7AD64607CE27ABE6509CC79D771238E41061BBAAE590AC8BFF04F710411
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
552	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\SecretTweaks\SecretTweak\Bypass.log
1⤵
- Opens file in notepad (likely ransom note)
PID:552