5b8ce80bd59ad779b94bc3e356205185bed3861ccd3c0db74b6e6424e28506b6

Resubmissions

13/11/2026, 04:36

13/11/2026, 04:32

user interaction
yes
max time kernel
899s
max time network
484s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
13/11/2026, 04:36

Target
overrides/options.txt
Size 3KB
Sample261113-e8qgdags2r
SHA256 5b8ce80bd59ad779b94bc3e356205185bed3861ccd3c0db74b6e6424e28506b6
MD5 fe85771c3437f7626c1a6d05c6364154
SHA1 c8f31b6c321e1bd811522438f8a1aeb26d5a330a
SHA512 f4ae42449b1bdb133fc5a7c339c6be31bbd381c0afd01b90a95c438116b3b1f1ba420061ab50d916af746677d3fb3e1bb35e4da219013952dd79ce05d27c61b4
TLSH
T146719A21503EFC7AD9D63E0AD550B6212E264834ACE2BCECF52D48EC374714846BEA9D
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4308	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\overrides\options.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4308