71b03e2d65cd8661a215257fe26be19ca3c1712459098ca83ec0b1239cc1093f

Analysis

geolocation tags

eueuropelondonukunited-kingdom
max time kernel
94s
max time network
54s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/06/2026, 09:20

Target
rpmserver.txt
Size 37.0MB
Sample260623-la97fsbz4v
SHA256 71b03e2d65cd8661a215257fe26be19ca3c1712459098ca83ec0b1239cc1093f
MD5 33013b5e5aaa812f5636406935ff213f
SHA1 7912ef807926320303c097fef74e14263f1dc83b
SHA512 471b0c4e4993fa6c81bbed8cc40a8f0d645d32490b21eb2bd63d61d98ad91e100a1fae2e114c67bf0c8f8a23c6abeb50cff23bdea66ded5ccb08986ced80c32a
SSDEEP 49152:XckGB/w/vHxZZl6Teqhgy4/QqQnwh3wZEkgcb5djuqgYbmsocRG/CAat2S5jIWG4:dv6nJ+8r1ofy7CjANt
TLSH
T11187F0157E60EA2AFFBCC32235576748319A0323D98B3D66185457C71AC21DA6A0FF2F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5940	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\rpmserver.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5940