f4d4a93ecb36d9fab1a2682546bac78f2f9a407ae4a26449e90e5a3dc1051628

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
05/08/2024, 22:04

Target
DControl/dControl.ini
Size 85KB
Sample240805-1zd8mstemf
SHA256 8e9a84da243905685ca77b6ef71841e610b88b7963d4de59f6dcbdd1621ecacd
MD5 05450ff06366ae22654b63a6e27d1624
SHA1 11453c370f41287fb6339e509bb9d3c91842b379
SHA512 ee0a9605b566aa89c8c9b260e1d9c15aecbd6cddc2df47fe24ef2cafbe8923b3e025bd5cd3d34499292589a3c094dd796ab4560c8099bad2051a54928c37b4b2
SSDEEP 768:i/G+NmPfjsxaxdk2akexodULxEQq1wIgC+AEbSr6:1+NyjsxkKdkJdULgbWSO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
2956	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\DControl\dControl.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:2956