be5c9e6777d553873639e727b3b98c629f7d8e3fb86d818d1561e055a1557116

Resubmissions

18/04/2024, 09:57

18/04/2024, 09:53

max time kernel
92s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
18/04/2024, 09:53

Target

DeepwokenMaster/configs/teroll_HVH.txt
Size

75KB
MD5

1fb7e0443cefe3f72d5d545bc14b6cd1
SHA1

15b3317f9032b994918c50ed4a215f2107cde23d
SHA256

c537dc9cba19adf849369280bd333b17227bfafa3b5a742985cb2d273c868dea
SHA512

7873cd715833c02398bf00440cf0ba4d6b9ca430ef739a3fdc678f1458eef9cf5c7741f578c72aad045fb8232449ae73b992c909b07e619f180115c6e61f6e51
SSDEEP

1536:s5Y+NYCEJYCAGlCXJYCDxYCv+ECcKrCUqxCpJYC/GZCB5rCzKrCjKrCLKPCzErCT:L5CDC5C2CKCNCnCVCACQCPC6CKCiCACT

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
3664	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\DeepwokenMaster\configs\teroll_HVH.txt
1⤵
- Opens file in notepad (likely ransom note)
PID:3664