4dc253dcdeb27de8ca4e6897eafe65571442588a571f9464c1d42f0c80fe4cf4

Analysis

max time kernel
150s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/09/2026, 14:08

Target
woof_dump.txt
Size 52KB
Sample260910-rfmk8svbnf
SHA256 4dc253dcdeb27de8ca4e6897eafe65571442588a571f9464c1d42f0c80fe4cf4
MD5 1da152c0cabe904b473fb7dbe7b005e9
SHA1 bb2467f9d632a4e2fafc5a3d575e799d3201ce29
SHA512 cf0f886ab2ae641cb5bd4738761d8b2fd912a98749836c9dfc8e53532a263e480aec46184b79f96e20926879b4943f17e1d5b360161ef78bf11ca7c13e215b06
SSDEEP 1536:N9bq9IDbDf+g3AiTFhZju7IsjQ/upwbiOz:NlrbDp3Ai5hs7pwbbz
TLSH
T12233CF392597CEBDDBD309C0F1210A73CD322D4FE6159361FA5D42346B943A0EBA6AD2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1848	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\woof_dump.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1848