209b1c37faf15556139ac65b3a1a1a0053c5b7872be5b3b916a44b6ba588c791

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/07/2026, 17:21

Target
stash_dump.txt
Size 119KB
Sample260702-vw35psax21
SHA256 209b1c37faf15556139ac65b3a1a1a0053c5b7872be5b3b916a44b6ba588c791
MD5 037acb1eaeaf511716c5d68e94fe372f
SHA1 578ef68d76f38d2944a7108555e927871b0ac1bb
SHA512 39f33326515f7a729c774d78faa3184f5eb103f38b03289afd4580d290b9296fdfeb0da8b6833dcd0747b66240112c9cc6101256d47643e3488ba846afedaffb
SSDEEP 1536:IZcHHHH+AzRaVrAHK5qD9w1Vx2Lcem+7aVrApsROfF4wQVxiA7a:IeuG9uGQu
TLSH
T196C34F2B9D04EAE39581F88C67BF7F37D0A4605CD184162CEB59CA4B090E378D97E49E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1212	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\stash_dump.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1212