dba1b23680497b37d3b40c0a0770baf1e6412e68b055dff1ef253453b3957bed

Analysis

user interaction
yes
max time kernel
144s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 22:39

Target
gangamstyleytbadbleusb.txt
Size 411B
Sample260804-2k8pdasbpc
SHA256 dba1b23680497b37d3b40c0a0770baf1e6412e68b055dff1ef253453b3957bed
MD5 903fe6de124fe6941974efd72d92503b
SHA1 983f69e0c1b348c2af9bb3c8c3118f0f07cbce72
SHA512 c1ab7fd64bfe1ae937557788e0c3cf8c34211d4d04e00a89e4c9176f319372996e3e0ebb3d22471f8ad1e99208c169189cdf02d15c69bb0c789ce47c47fdea18
TLSH
T10BE0AB3A68F95255083242E17C3F43EFA40BDB2F902680349492920F7DBC2FB02421C0
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
936	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\gangamstyleytbadbleusb.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:936