0a00c637b6c099e3803fc5227a9ab8f956120db04173eee6446c2bb63ba92263

Analysis

max time kernel
149s
max time network
191s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/07/2026, 04:29

Target
Starbound.1.4.4/Readme.txt
Size 1KB
Sample260715-e4da9abw7p
SHA256 0a00c637b6c099e3803fc5227a9ab8f956120db04173eee6446c2bb63ba92263
MD5 9886bc5d082a8ec9c8ca4ba6c79b3122
SHA1 b7fe892b3891ec59906bc8236c1976cdec5d04c8
SHA512 d1fd83cc3e176d9988cbcd9a59304cb3dee795ff7ecbee2fc7baf1b34883918fa497a3d35ef364cf9440e4ce615208eebd1dc52d2742fbbbe020717fe3a37948
TLSH
T1243106FE4B228585066DBDF3B35BB20EEA51819CD20670C2759C476B9B5D38C42EC08D
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4968	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Starbound.1.4.4\Readme.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4968