Overview

overview

7

Static

static

7

8xyz8.rar

windows7-x64

3

8xyz8.rar

windows10-2004-x64

3

8xyz8/Defe...gs.vbs

windows7-x64

3

8xyz8/Defe...gs.vbs

windows10-2004-x64

1

8xyz8/ReadMe.txt

windows7-x64

1

8xyz8/ReadMe.txt

windows10-2004-x64

1

8xyz8/dControl.exe

windows7-x64

7

8xyz8/dControl.exe

windows10-2004-x64

7

out.exe

windows7-x64

out.exe

windows10-2004-x64

8xyz8/dControl.ini

windows7-x64

1

8xyz8/dControl.ini

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-03-2024 21:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8xyz8/dControl.ini

  • Size

    85KB

  • MD5

    05450ff06366ae22654b63a6e27d1624

  • SHA1

    11453c370f41287fb6339e509bb9d3c91842b379

  • SHA256

    8e9a84da243905685ca77b6ef71841e610b88b7963d4de59f6dcbdd1621ecacd

  • SHA512

    ee0a9605b566aa89c8c9b260e1d9c15aecbd6cddc2df47fe24ef2cafbe8923b3e025bd5cd3d34499292589a3c094dd796ab4560c8099bad2051a54928c37b4b2

  • SSDEEP

    768:i/G+NmPfjsxaxdk2akexodULxEQq1wIgC+AEbSr6:1+NyjsxkKdkJdULgbWSO

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\8xyz8\dControl.ini
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads