f6e3c4549690718297924317757db3941e9f282c0534d9ae1d20132d4f8d6659

Analysis

max time kernel
58s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 00:12

Target
autorun.inf
Size 70B
Sample260808-ag8fnawblb
SHA256 f6e3c4549690718297924317757db3941e9f282c0534d9ae1d20132d4f8d6659
MD5 95ce97cd76fb08e07e005f3a419757b1
SHA1 4a5256ea0f40d31773072b7311afbd4cd5f50616
SHA512 bfb56939d24cb3a13577df79238edb5d70f5c7d15b06ea188531265a49ce79b484232b19258f7b359fa888a87ce2028275bb8eb8d96d8064d416811979cb2261
TLSH
T194A002B7E98E246F6B1D6454F4E6143CE7FAE0A4190023DC2257079518D85492F39492
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2524	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\autorun.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:2524