16bb80d4053ec418b2a5b35fda0f85af78787b08e8846f543c632e92f8903fa5

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 09:11

Target
CheatMenuConfigs/Damage.txt
Size 18KB
Sample260925-k5tbracg79
SHA256 16bb80d4053ec418b2a5b35fda0f85af78787b08e8846f543c632e92f8903fa5
MD5 30597279d14447ab83f5aa4c1695a4eb
SHA1 a54f5af4d75b2e3489e1e2a82835ea835e29f23f
SHA512 64e774f9b83aa853126f8c8b6f55074fcbcb4a3caf7d7e77f1cbe0f5501f046c7ff55b8449acbaaceb25f12246b581fc7ad0611a095fb06b1cf02f161fcf901c
SSDEEP 384:uvnzBp/DablSXftC2iA+1y6+0LKjzgs0OwU7Y0fy0tgSGnHY8F/gW:Anf/DaItpinJUBKjFn
TLSH
T1928296C00C62F8D662B6F2A938646CC8F4E75287A1311B71F37A820CD485DE6B75D72B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4624	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\CheatMenuConfigs\Damage.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4624