38d11f3a5a178b8f5e083b1c4269e93867835ce1e97a7b0b0db312b27d2b1115

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 09:11

Target
CheatMenuConfigs/EnemySwapper.txt
Size 4KB
Sample260925-k5tbracg79
SHA256 38d11f3a5a178b8f5e083b1c4269e93867835ce1e97a7b0b0db312b27d2b1115
MD5 4d4f281c5b1eec10a5cf9e502ccf9d20
SHA1 f1e2cb2a56e99ec983bde8d1558cc1e5a5e99d36
SHA512 e84b0baa0df761955915bc0f3dac9f9f2752df130483db53c52b8b308c07bf6353401ea285192c3aef8877ba9a8cca09af92810c659e20fc1f26829d2df045dd
SSDEEP 48:NWLd16Yxh/v1fFq1bD2mLSARLyKMTuwCdjH9dsBwFtlxzqCIQjnpYggHsaEXYOeu:NWB1L/NfFktiuP9dsBqtlQNQVYgVaEec
TLSH
T1AB81B7DC26DCD0EE6889303FD1513A9B7F4C6A7297B318C4A201AFAFF3559086A0C965
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
4536	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\CheatMenuConfigs\EnemySwapper.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:4536