Overview
overview
10Static
static
530102024.rar
windows7-x64
130102024.rar
windows10-2004-x64
130102024/D...gs.vbs
windows7-x64
330102024/D...gs.vbs
windows10-2004-x64
130102024/ReadMe.txt
windows7-x64
130102024/ReadMe.txt
windows10-2004-x64
130102024/dControl.exe
windows7-x64
1030102024/dControl.exe
windows10-2004-x64
5out.exe
windows7-x64
out.exe
windows10-2004-x64
30102024/dControl.ini
windows7-x64
130102024/dControl.ini
windows10-2004-x64
1Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
19-12-2024 23:29
Behavioral task
behavioral1
Sample
30102024.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30102024.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
30102024/Defender_Settings.vbs
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
30102024/Defender_Settings.vbs
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
30102024/ReadMe.txt
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
30102024/ReadMe.txt
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
30102024/dControl.exe
Resource
win7-20241010-en
Behavioral task
behavioral8
Sample
30102024/dControl.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
out.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
out.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
30102024/dControl.ini
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
30102024/dControl.ini
Resource
win10v2004-20241007-en
General
-
Target
30102024/dControl.ini
-
Size
86KB
-
MD5
f562c447812aea71ea3caa93b7252fff
-
SHA1
3e67cee59da2c2a6e667c04741b6ec93dcb99f8c
-
SHA256
951f17bb65a39011eced7274da19940c9ddf062a7f6cb4951d4982c9c1efb310
-
SHA512
52fab124af1d7ac2fabbe4294593abcc7479bbf680e2fd7360c8b69a25681b015de71d5ec5297bfd429c74761cc87a581ab9ba6d19a45e4a76b921f2c3f88d3f
-
SSDEEP
768:i/oizrPfjsxaxdk2akexodULxEQq1wIgC+AEbSr6:fiz7jsxkKdkJdULgbWSO
Malware Config
Signatures
-
Opens file in notepad (likely ransom note) 1 IoCs
pid Process 2332 NOTEPAD.EXE