e5a177d725e613b0da9adaed140c3e5ab401c32225dd8ccf8daf2d9f70b4beb0

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 09:11

Target
CheatMenuConfigs/Eagle_IDs.txt
Size 225B
Sample260925-k5tbracg79
SHA256 e5a177d725e613b0da9adaed140c3e5ab401c32225dd8ccf8daf2d9f70b4beb0
MD5 51d15e74d5d2431ae894aa55b2a9022c
SHA1 97a7d1e95afe6bf4bd40947e4f9cbd90e007f74f
SHA512 e3b55b1eb2ae0451a093b900e26aff082d9e7ebdff2fc796e4bb71d71a2ad74e4252f82b133f664554a68745011258c138be030f8c5805159a92c74e9db2e2fb
TLSH
T101D022F1FA1C8C029C0446A0378A2080DEB099B91307773F1D4B5AEC081043F23CEB8C
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4808	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\CheatMenuConfigs\Eagle_IDs.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4808