26e9d21319d0805ce58305ab43d6509cc3cc72a5999acc1d35b02fecb6f45f44

Analysis

user interaction
yes
max time kernel
22s
max time network
16s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/10/2026, 13:02

Target
Athena/imgui.ini
Size 521B
Sample261031-p98dpadt9l
SHA256 26e9d21319d0805ce58305ab43d6509cc3cc72a5999acc1d35b02fecb6f45f44
MD5 2fbebd27022004c191f0f8f695ea205b
SHA1 2b752a06c4e673d36c72d142f727f4475370401f
SHA512 2a4c368849ebf05b6b59383e7c30221f4523ac1c8e3c94c5777724c183c9f8a352b9d21fe6fce23472a78a3fef58691289060e3ac5584fa2c2df12e0ea298eda
TLSH
T1EEF012137335035F50F794487636A3F6BADE63102813B1E861A4246BFDCA53B40070DC
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
436	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Athena\imgui.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:436