ff2e715d05a9eca9df681fa65db7f80b23f09b53b09673fb7227be4a633cd131

Analysis

geolocation tags

eueuropelondonukunited-kingdom
user interaction
yes
max time kernel
26s
max time network
31s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 14:32

Target
README.txt
Size 866B
Sample260720-rwc2qsds2r
SHA256 ff2e715d05a9eca9df681fa65db7f80b23f09b53b09673fb7227be4a633cd131
MD5 9899c472d8608f1577dcc95f5b4b96e4
SHA1 b32d191c8da786480c6dd96ee02caf46499822a4
SHA512 1c6118794d6fdbf14eb3a4f07535340c916b510308493602089e415bdb2fe09bd50cd01423b6fb361e1a61a8477808091e83b6b0b6bc82e4c56192c6d9d6eee2
TLSH
T1DD11E3BE0B17C2AC5EB642E7229451A8FFB75073D08A92D9F539123832D182FC60090E
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3200	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\README.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3200