17d098ce854e56e25466fd86f6517cf1c230ec99916a8737e402c61633f6d495

Analysis

user interaction
yes
max time kernel
149s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
07/11/2026, 21:29

Target
satellitestress_token_1794078300445.txt
Size 607B
Sample261107-1ccrasfv7x
SHA256 17d098ce854e56e25466fd86f6517cf1c230ec99916a8737e402c61633f6d495
MD5 7a964a935aad4489be29d5012262aacd
SHA1 698e6eda125d8115137db774b843b1bf684acbaf
SHA512 715e6459fa933fe6460f034ef97a26a23058a13676d2fdf0055e87dbe98041e99ef6e9d6825b2afe250ff801c32dbe8df630404c88f7bce0abc43ee520dfefe8
TLSH
T135F02654825768A586AFCAA25C90EE513143BC46D56F3620791CA3D99A227AC0CFEC0F
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2612	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\satellitestress_token_1794078300445.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2612