7c116037367f32f7c9c2d75cf8cb1bbc7f47259957afff0c037463c9ee0059df

Analysis

max time kernel
149s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/09/2026, 09:11

Target
CheatMenuConfigs/ArmorEditor.txt
Size 2KB
Sample260925-k5tbracg79
SHA256 7c116037367f32f7c9c2d75cf8cb1bbc7f47259957afff0c037463c9ee0059df
MD5 0d2d57b11df0ff7dd22981f322eeb8d6
SHA1 879f579f1242dde2d064d56190163b8b499842cd
SHA512 b57de4c07139b0bcd09c9fd6c301680e9508ed87c68506a09489e10941cf7e07d780107f3ed00c06a81644c03e8c46bc3c3d5b52a06a55578cb30f0d2108e3fe
TLSH
T1F45172D43742A615DEE320DAE8135086BE295013F7D20461B56E8BCB72916B9C3DF1BD
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1520	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\CheatMenuConfigs\ArmorEditor.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:1520