ee148cc9c3411abd1f2c6aac69797443c66195184cb70bb3fa9dde90bb488964

Resubmissions

13/11/2026, 04:36

13/11/2026, 04:32

max time kernel
898s
max time network
476s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
13/11/2026, 04:36

Target
overrides/config/xaerominimap.txt
Size 627B
Sample261113-e8qgdags2r
SHA256 ee148cc9c3411abd1f2c6aac69797443c66195184cb70bb3fa9dde90bb488964
MD5 ab39cb60c40a30596fee4f7eaff09e60
SHA1 578038768fd7e3e49dfd08ab5c31a8787f27c86f
SHA512 2da961b322c01477d2cc030190926906f22ddebffd6dd0deca98fae8b857631230f68f64d109dc756b5a2d98232cc416e7fd32786f3c71f276e18084e6a7d2a0
TLSH
T155F0A2E06DD71379CB861131F84A39837E33AD34B8976B6775FC019DA8075008B7C429
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4864	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\overrides\config\xaerominimap.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4864