c80a96b2841236ac1763270aa2d5a7865ad652a68f991981cb9818721be837c3

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/10/2026, 17:51

Target
id_token_rayan/desktop.ini
Size 142B
Sample261030-wfe9dazzhw
SHA256 c80a96b2841236ac1763270aa2d5a7865ad652a68f991981cb9818721be837c3
MD5 7cfcdf7519c1ed9a3485bc708f5260ea
SHA1 f4254d4d9dc62f4fcfd1b68391f977c351ea118f
SHA512 e485a9e5e4351d2f67a4a03b673e5131e21b2e7e491bef1fb77178c92da3ef33e6b484c1c48aa3a851f71bb8e08e0cb5f16f500c2af2089dc1880f33ac5d9975
TLSH
T137C02B07605B80B1F707C00FE10689584A900C774CDFF100C391969360D4906CEDCB1C
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4240	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\id_token_rayan\desktop.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4240