f236ad0189fb13b217027cd2baf4cbbac47f9158e303e1bbd22148ea55a55766 | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
13-09-2024 16:40

Sharing

Report Analysis Logs

General

Target

dji_vcom_driver11.inf
Size

2KB
MD5

48360ef1d3102838e4ce63e88446e127
SHA1

c7cc4adcedcdc578c8ee2e31d19e30cd472bedc5
SHA256

f236ad0189fb13b217027cd2baf4cbbac47f9158e303e1bbd22148ea55a55766
SHA512

d122f527f1927b004f291d7e6f55e47e675aef6ab910990d9d6457f8e04b8375a31ee548a017e579a1a2f7fe9abcc96b12f78e3f9008fbf3ff81e64609e0a92f

Score

1^/10

Malware Config

Signatures

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
1916	NOTEPAD.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1916	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\dji_vcom_driver11.inf
1⤵
- Opens file in notepad (likely ransom note)
- Suspicious use of FindShellTrayWindow
PID:1916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads