c6d1b48b5a2d6ba940092880d73620cb46438f2e80b6d019a1d3d385bf31c1db

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/07/2026, 03:48

Target
Scam_convo.txt
Size 20KB
Sample260703-ecvffsa19s
SHA256 c6d1b48b5a2d6ba940092880d73620cb46438f2e80b6d019a1d3d385bf31c1db
MD5 f7342aed1abf5cb33af9a490fe1149ca
SHA1 06ef7698956937bfd38bcfa0781c8d970ab545e1
SHA512 ebf3f69d51c4f018bc0a51b91a7268155cd37b38a3b2358a83bab56458bd39e819eaa0210f7c80899953bb76409b7289db51d33386bd04a65b28c3437b2d18c7
SSDEEP 384:Y98OHLUlFw9vv8+JZCcF6nTK1vZljVKkQNuJrNo21nd7CUt:YC7KfNnLF
TLSH
T1BC92E18F93CA433C0A23E385E3A9342E6367413DB6BE945D7F09B464171631AB2791B7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1812	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Scam_convo.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1812