fc55533b1aad8f58ea40f7c09ec1d52995d57bf9bdbd8417b7eb33fa7d804a37

Analysis

max time kernel
149s
max time network
195s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
15/07/2026, 04:29

Target
Starbound.1.4.4/autorun.inf
Size 64B
Sample260715-e4da9abw7p
SHA256 fc55533b1aad8f58ea40f7c09ec1d52995d57bf9bdbd8417b7eb33fa7d804a37
MD5 26a2c050cb11a78b2a6f6a152c9eae04
SHA1 82252acd836b4fdc815f38a3b382c09862081bfd
SHA512 d12a1701270460cc6770b7b6f56e14ec636c0b7fa0a542905833c67b6d7acbb1d090dcc6946b816dbc6efa0da403739635b171b4c2183a96c1fa0cb7843b9e78
TLSH
T14EA00280C91E886DBE09E0F1079A3EA1CD9B51EA09645675D2C76486503539C0F5D841
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4508	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Starbound.1.4.4\autorun.inf
1⤵
- Opens file in notepad (likely ransom note)
PID:4508