f81dbea7d52439f7450869476155f038c223e6fadfc14f279ff727eca53186ca

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 09:11

Target
CheatMenuConfigs/MissionEditor.txt
Size 4KB
Sample260925-k5tbracg79
SHA256 f81dbea7d52439f7450869476155f038c223e6fadfc14f279ff727eca53186ca
MD5 2cd4c28dfe508f4a02e801061905c6ab
SHA1 1e897fbcbf64319b49b4ccc9eff5b24e5876d7b1
SHA512 784731774963915d904484ccb784aa9123965156cd342b85cdab31e0dfcbb4f1eec6d0c805b6229572aac7acdb2636f5ed7ef9fa73932536664e2ffd72eb4703
SSDEEP 96:TZIcPsKEQYOACsYx5w08j5gwQcJ2LqVLeaQD+j/GwVLrjEo4bQeQBxwZTQN:TZiOJNUqqVLoCDhLrjEWPB1N
TLSH
T16A9103808DABD23469C909E93131DBE0DC30E16A72390C36B8DF8DE197601D8E57AB3D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5548	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\CheatMenuConfigs\MissionEditor.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:5548