766343dc283c61044b21ed37f8caf8250c2496c4ef97480ab993a03280cb8091

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 04:35

Target
Loader/desktop.ini
Size 67B
Sample261102-e7313sey81
SHA256 766343dc283c61044b21ed37f8caf8250c2496c4ef97480ab993a03280cb8091
MD5 a74d0e04cb06529201c8999841f4f194
SHA1 e587e798b3ae806a46df86726c79a549e472a8d2
SHA512 b8a51030750956139526f96911a0f253adcfba636bb0d1287d8d886afc11270cb9211c6cc83c21d7a52cf233e9d7fc43e7d3ae34448fb884a2314772563abad8
TLSH
T106A00256661EC5B0D06BD846D04D8528D66CA80F9D39F82485E4B1C1DDB07194F58AAE
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5172	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Loader\desktop.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:5172