81536b620c77e2a8eda0554b42483ce0bd8a7b33ee53c5b38a81f3550e08d867

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 01:04

Target
mod_d1kamon.6.29/mod_d1kamon.ini
Size 607B
Sample260727-be46wsteme
SHA256 81536b620c77e2a8eda0554b42483ce0bd8a7b33ee53c5b38a81f3550e08d867
MD5 3b3e836361dea0020005bc0cd91ac38e
SHA1 4b7b99587815da1efa0e828ff5e7d71aa98d401b
SHA512 647d51c772c65a04ebbcf8bfa08f2ec7ed086dc9973ab0e4d48637ba9c4c6d91a5829ff82369b189d13f60878773e39d6125d0dd1176619dd3a39c1d7ac392cb
TLSH
T121F0ACC74B0619E23FF18B17B22E91C1FB20831B48B3101215EA478D7074302A2F99AB
MD5 SHA1 SHA512 TLSH

Score

1^/10

ransomware

Opens file in notepad (likely ransom note) 1 IoCs

pid	Process
5392	NOTEPAD.EXE

C:\Windows\system32\NOTEPAD.EXE
C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\mod_d1kamon.6.29\mod_d1kamon.ini
1⤵
- Opens file in notepad (likely ransom note)
PID:5392