2bdbdde08d55a3789394e97f1d3f25e606363645a6fca536f73c0f5e01497037

Analysis

user interaction
yes
max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 16:25

Target
satellitestress_token_1789404065292.txt
Size 607B
Sample261001-twza3sys4q
SHA256 2bdbdde08d55a3789394e97f1d3f25e606363645a6fca536f73c0f5e01497037
MD5 ca68bf6a7414d24e3e604554378a623a
SHA1 0629cbb2265ab4dee055380a841d79a3c58c9d9a
SHA512 9c683c4929d7b6cff9ad35d54faddb7bbf2ad1a3f14aeb7d5febc977d1e9c2e7a7351312c2c49d7f748ea2580078159f6c06d88674e0087a40c8bec86d9f90af
TLSH
T102F0C08952131860806B58D14C859D9032427909E02D3024351C2AE58A3039C5CFD41F
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2684	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\satellitestress_token_1789404065292.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2684