c2702d244e84cb0abc4f964062b9ecf51b1697712ad4c03b37d345f93d045bba

Analysis

max time kernel
300s
max time network
47s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/07/2026, 10:18

Target
Soundpad_/SteamConfig.ini
Size 135B
Sample260728-mcaeaathrh
SHA256 c2702d244e84cb0abc4f964062b9ecf51b1697712ad4c03b37d345f93d045bba
MD5 8aaae6e65f734e7f90b2d11966c76a16
SHA1 f910a899891026e6d22305d176a73d2588b99715
SHA512 96f0c7cd0b8e2ce8365f907a03c8229ed733fdcd07a826d82aa242c870f5994d04b1987263ba2a8e0a314ab281d5cf9905cc562177e09b499a99fe3e8d3cfb5e
TLSH
T1C4C02B487466830C000BE0289C1208B838DFB520972D4008F230D72C1D06F7D8705822
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5884	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\Soundpad_\SteamConfig.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:5884