cf21092671adeb1aa23bd9739a5f466d730e91161a5a260931de6afcebf3ae26

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/05/2026, 04:34

Target
GameUserSettings.ini
Size 7KB
Sample260530-e7bltsfz7q
SHA256 cf21092671adeb1aa23bd9739a5f466d730e91161a5a260931de6afcebf3ae26
MD5 59e606e93f62ba0705be3f4714ebd110
SHA1 87c499176273a22b7afe460cde1e6e2818ab3a4d
SHA512 8404ded99607840d15cc576b65f0d40a45e61c6d5850ab3332cf9b854637240eaa7494b29880bee5887c112521d109f4d6b1fb60b58de999b5e4b31619f1fa13
SSDEEP 192:hfqig7bARtYZ1LK0vx0+iRk5piMx3Ffuiymu5wN011N+Sauiv1x45g7/EVkk:RIPARtYZ1l50+G7KFOauiv1x45g7/Eh
TLSH
T16BF184E42C201092D92791BBBCA7F01314F173AE51DF5408BBC6A71B784DB88A5CBA3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5132	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\GameUserSettings.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:5132