35054399b18acfd3864978aebda9d8928e937becac74f097899da581b62aee07

Analysis

max time kernel
598s
max time network
473s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260911-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
10/11/2026, 13:59

Target
IdleOS/IdleOS/steam_settings/steam_interfaces.txt
Size 1KB
Sample261110-ramdaaax2l
SHA256 35054399b18acfd3864978aebda9d8928e937becac74f097899da581b62aee07
MD5 819b5bb0b32cb2029cc583e504ec3340
SHA1 d3b25e7e133ea05b13e6d1989611c8def1d14a9a
SHA512 41ee76bdf091ca551ddece000646cc43dd532bc5be3721e73e96a5326378be0e2c1ffbbba19d616156e3f11e44045f82e7b5af6f66f73692bc4b6b32af42d093
TLSH
T1E331342D51313DB8AA2C64E22D917A1F724C22932180ACFDDE42D9E204DCECB1F7F915
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2880	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\IdleOS\IdleOS\steam_settings\steam_interfaces.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:2880