aa6d81763ad4e42f5ab72dbb8cac273b0b249989848762f626503fc9ee152fb2

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
21/04/2026, 03:33

Target
Mewgenics/steam_emu.ini
Size 1KB
Sample260421-d37yssa151
SHA256 aa6d81763ad4e42f5ab72dbb8cac273b0b249989848762f626503fc9ee152fb2
MD5 6d9cc05ba7d3601f02b43ab08aa36086
SHA1 a53b020ee9dc1f2579a1a1a854012f472061ef26
SHA512 0c208b7f520a497b060f3b272ad36e8ebe2b8ec91391a0eb0f86417960c9fe0c770b446666657cc23e5ca10edf5d8be448164d43ffba83eb3ceb7f828d85e9a2
TLSH
T1BB41A8181695B73B4E0BB2B5575FF22E679AA0C6F70B8CA8723DCBC8B340211110159F
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4308	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Mewgenics\steam_emu.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:4308