Overview
overview
6Static
static
3ParkContro....8.exe
windows10-2004-x64
6ParkContro....8.exe
windows11-ltsc_2024-x64
6$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDIR/INetC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3ParkControl.exe
windows10-2004-x64
6ParkControl.exe
windows11-ltsc_2024-x64
6pl_rsrc_bulgarian.dll
windows10-2004-x64
1pl_rsrc_bulgarian.dll
windows11-ltsc_2024-x64
1pl_rsrc_chinese.dll
windows10-2004-x64
1pl_rsrc_chinese.dll
windows11-ltsc_2024-x64
1pl_rsrc_ch...al.dll
windows10-2004-x64
1pl_rsrc_ch...al.dll
windows11-ltsc_2024-x64
1pl_rsrc_english.dll
windows10-2004-x64
1pl_rsrc_english.dll
windows11-ltsc_2024-x64
1pl_rsrc_finnish.dll
windows10-2004-x64
1pl_rsrc_finnish.dll
windows11-ltsc_2024-x64
1pl_rsrc_french.dll
windows10-2004-x64
1pl_rsrc_french.dll
windows11-ltsc_2024-x64
1pl_rsrc_german.dll
windows10-2004-x64
1pl_rsrc_german.dll
windows11-ltsc_2024-x64
1pl_rsrc_italian.dll
windows10-2004-x64
1pl_rsrc_italian.dll
windows11-ltsc_2024-x64
1pl_rsrc_japanese.dll
windows10-2004-x64
1pl_rsrc_japanese.dll
windows11-ltsc_2024-x64
1pl_rsrc_korean.dll
windows10-2004-x64
1pl_rsrc_korean.dll
windows11-ltsc_2024-x64
1pl_rsrc_polish.dll
windows10-2004-x64
1pl_rsrc_polish.dll
windows11-ltsc_2024-x64
1General
- Target ParkControl_V5.5.2.8.exe
- Size 1.1MB
- Sample261013-2ca35svsaw
- SHA256 e5357d785fa2a04701f6225011d14ecf4b8b204216d06fd443f4b2bc1d2731c7
- MD5 0e35e6b18c80d8222ee345d1c4d4cac5
- SHA1 0526825c003aebc93a7fec4bf1b3b681f2c5a403
- SHA512 46cbeb6d0b4b7df041911c1fc128bb52e697a50750d55f37dce11817df5f48e1f575b080ef56cf6137726b92ea8691dcbe3306afe1adeeac8ee52bafac5dc6b5
- SSDEEP 24576:BYGNeVFZW+JT4dfttepck7vrMTMA/FujCP2j2t2/COPVfS8F:+GNs8dfMck7Qr/F7PuzRL
- TLSH T10135230954D2D81BD1216279DAF8C3A27590687B996917CB3F20733DFAB10D1EE0A3B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
ParkControl_V5.5.2.8.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
ParkControl_V5.5.2.8.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/INetC.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
ParkControl.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
ParkControl.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
pl_rsrc_bulgarian.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
pl_rsrc_bulgarian.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
pl_rsrc_chinese.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
pl_rsrc_chinese.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
pl_rsrc_chinese_traditional.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
pl_rsrc_chinese_traditional.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
pl_rsrc_english.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
pl_rsrc_english.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
pl_rsrc_finnish.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
pl_rsrc_finnish.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
pl_rsrc_french.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
pl_rsrc_french.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
pl_rsrc_german.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral24
Sample
pl_rsrc_german.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
pl_rsrc_italian.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral26
Sample
pl_rsrc_italian.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
pl_rsrc_japanese.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
pl_rsrc_japanese.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
pl_rsrc_korean.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
pl_rsrc_korean.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
pl_rsrc_polish.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral32
Sample
pl_rsrc_polish.dll
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target ParkControl_V5.5.2.8.exe
- Size 1.1MB
- SHA256 e5357d785fa2a04701f6225011d14ecf4b8b204216d06fd443f4b2bc1d2731c7
- MD5 0e35e6b18c80d8222ee345d1c4d4cac5
- SHA1 0526825c003aebc93a7fec4bf1b3b681f2c5a403
- SHA512 46cbeb6d0b4b7df041911c1fc128bb52e697a50750d55f37dce11817df5f48e1f575b080ef56cf6137726b92ea8691dcbe3306afe1adeeac8ee52bafac5dc6b5
- SSDEEP 24576:BYGNeVFZW+JT4dfttepck7vrMTMA/FujCP2j2t2/COPVfS8F:+GNs8dfMck7Qr/F7PuzRL
- TLSH T10135230954D2D81BD1216279DAF8C3A27590687B996917CB3F20733DFAB10D1EE0A3B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
- Target $PLUGINSDIR/INetC.dll
- Size 24KB
- SHA256 c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502
- MD5 640bff73a5f8e37b202d911e4749b2e9
- SHA1 9588dd7561ab7de3bca392b084bec91f3521c879
- SHA512 39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a
- SSDEEP 384:wv1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJ:w1AvEs3HBLzYn29vYh
- TLSH T1F2B2E69157EA135EF7F19F347475EB2249BBBC214821C8CF5633268E19B2242E930727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
- MD5 68b287f4067ba013e34a1339afdb1ea8
- SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
- SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
- SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
- TLSH T16BC19474B3C248B9C491513768AB33D36612EE746784500F9F6711AA38209F7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target ParkControl.exe
- Size 650KB
- SHA256 3aff6ee2fc98346c1053973d3e69bb3f534cd146a20be7ee069b68a2a60cf8a0
- MD5 0220c7fd38d810203d0a044b22881116
- SHA1 7be33ebff0f64c2d67699b9c70cdcc6833bca638
- SHA512 2449f3db007c9aa1f5cdd5496bfda4f502f5851e4439e098ac83e0029b29526ac7d494930523cf4435f59d9033f7c5a9d3d163581d86fa408ef34b302f32538f
- SSDEEP 6144:bZydCCCvbx+tqvtAQVbylRYrFm9oeq9+zCDde9R2C6Pepi6yu5HcbxCOZEKXK3IA:HGQulo+zW09RbQgweK64l2DTUUB9
- TLSH T169E4394FE6B511E8D0BBC0398A629137F9713C8D473897DB5290A6671B33BE49B3A710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Power Settings
powercfg controls all configurable power system settings on a Windows system and can be abused to prevent an infected host from locking or shutting down.
-
- Target pl_rsrc_bulgarian.dll
- Size 1.9MB
- SHA256 19c0e2e16971228ddda419fca627c8cedc8370ab098d28357e679b9d2501c92c
- MD5 be5fe0dd1de34ef8b80ca86cb88531f5
- SHA1 a1d532cbf2f30811303782275549a2f5b3499df9
- SHA512 55858bf1dfa2a5a2eca9517c008dd354d915325cf202041e95998ea86c4afe753498bbf6c5d32cbc555786192ed5f2d1a53cfb22b53fd2978953f3bb58fe8f4d
- SSDEEP 6144:wfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dyVkzjFC8fB4adLxp7WGCNE/Jt1icNE/z:wfcHoVkFzLXKGh4ZJe6cwTqREewNt
- TLSH T1079582CF647ADC54F508DE380E814FD914DB3E8DAA3835757A3B7919A93C2362628C87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_chinese.dll
- Size 1.8MB
- SHA256 7b6f3d3a4450d14250512f15f7e1a88a86f7647c48fc55b2f2d6a1865ed17cb7
- MD5 03cea05f544a9019c3ef1f2dadf115ce
- SHA1 12093d814c889ccf63b02ea5543df5ab4b8f30b4
- SHA512 2ae414e18cc301805c2bab6cfce95209a009d7c938a141a692673f77126c335321937356a5b2e008297e714bf363d8e6d3cc2140d7f24b55e99423a424ba1835
- SSDEEP 12288:cfcHox9FzLXKGh4ZJe6cwTqREew/0wdQTE:cfcHoHhUHTh1d9
- TLSH T14385C5CE1476DC99F51CEE781A804F9818CB3C9DF83C343A7632761EE97C2765828996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_chinese_traditional.dll
- Size 1.8MB
- SHA256 2c0be6f8f7708b3a6312d76c06409587b0955b86fcd68cfd8bb064a5e78461db
- MD5 ea1308fcbeddc5b37e5397f19a18acc3
- SHA1 a031c88a02a0864ab90897f86baa0ec1a025f8df
- SHA512 d232e608688435f4589eaf04291ed9a77f8fd673ddf6372ef22914bb3b8180991804b8cad506079e06f35ced1c812332dd5540103ffbd01238a2ba800adec124
- SSDEEP 12288:ERfcHoryBOFzLXKGh4ZJe6cwTqREewLbhHT2:efcHog8hUHTh112
- TLSH T14385C4CE2476DC99F10CEE781A814F9818CB3C9DF83C343A7631751EE97CA765828996
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_english.dll
- Size 1.9MB
- SHA256 88c9534f6969a4452c75dd70e2a42cc69f93154391967ce304ee7d44cb929504
- MD5 2a050b4fb92ab6ae7ee9fb4b34623de8
- SHA1 aef19c625a76f7a5748c972f1fc4570958c3d532
- SHA512 65b604025292474c939f85324cdb9e2b6998d34a614f1e74414377e1aa6bdeee29bbf50f06e5da1f1c3e579214116787b88525d583621d4222b216751a66fb8e
- SSDEEP 6144:YxfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dyqNdSNjFC8fB4adLxp7WGCNE/Jt1icd:YxfcHoycFzLXKGh4ZJe6cwTqREew5uf
- TLSH T1C49582CE12BADC58F179EE781DA04E5818D73C8DE838B13D3A31711E997C6669828F53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_finnish.dll
- Size 1.9MB
- SHA256 afc8052a8153f17e7c010c0d67978f10a45641312d7909aecab585ff7cc924a1
- MD5 21f83f03cab5593c779f0e2a4d7c19ea
- SHA1 276ed58734cc9af0abf8e81711f19a8f24e562c8
- SHA512 a2c5add0c5e360a1a03a60a13a9e693d050778bc50695bfbf7b95ad5d138cffade371a81f70981e20de0162cffc47cc9a4ded62953058a602dd45ad1d057001f
- SSDEEP 6144:fYfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dy6KSjFC8fB4adLxp7WGCNE/Jt1icNER:gfcHo6lFzLXKGh4ZJe6cwTqREew7FT
- TLSH T1E09573CE15BADC64F2BADE381DA04F5414D73C9EAC38B0393631711D997C2A69838B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_french.dll
- Size 2.0MB
- SHA256 57ecfc42b25ac5eb5f03843c91be8a237ccd71ab8ce8d6cacf0726deb873cbdb
- MD5 30140a37cb4624eaf4d8b73dbf76b45d
- SHA1 817511f852e27744590699d40bd385fb3baaa6f6
- SHA512 030c1e4faa99c744b528e5b42e46de6849c046fdc0e22b1e77cf79c8fa7fc0c52810d2631242d5fc61d2789d19f242376340b3a3b14a9017d75e8eb6f38907ba
- SSDEEP 6144:yfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dyW0ZjFC8fB4adLxp7WGCNE/Jt1icNE/5:yfcHoW+FzLXKGh4ZJe6cwTqREew968
- TLSH T11E9562CE62F69C55F279EF3819B04E5418DB3C8EEC38B03D2231715E9D78A659828B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_german.dll
- Size 2.0MB
- SHA256 2ab76af9951a4a5c42d900c9d4574c4c51a8746be2792ddce1471b56140fa544
- MD5 4ab71d378c71d102b181c503122ff0bb
- SHA1 c7d4137fef5beb7dbe71c101098f68ff832c0fa6
- SHA512 29dc09087c3aa695e8219439479080fd134fe72967174878ee2ebba0a1a9efcb4281050dc9d7e4c172ed4ca191146f00a4846a7549d6db29155f8c11a7e9b6dd
- SSDEEP 12288:mfcHoYAFzLXKGh4ZJe6cwTqREewcc/dVLt:mfcHoLhUHTh1/vt
- TLSH T19B9572CE12F6DC58F2A9EF781EB04F5818D77C9DE838743D3231711D98786669828B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_italian.dll
- Size 1.9MB
- SHA256 85e816564dd6db34d2c3af960040243e78a49430ca2911d487b6a158c0e0efb3
- MD5 af21af12125cfd7f9b16d7280a8a8080
- SHA1 286e214f4f46f5c3f958a96a4ef1c5fe0750524d
- SHA512 1141f73b3a07c15fd1d102b956504b92959fc6d2711d439dcd5f073b0df64424afed5d9ed17adc06fde52c54ce4061534468e013097ff3e78bd964e0c8f55752
- SSDEEP 6144:EfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dymwweejFC8fB4adLxp7WGCNE/Jt1icNp:EfcHomBFzLXKGh4ZJe6cwTqREewmg+
- TLSH T1149573CF15FA9C5AF1BAEE381DA04F6818E73C9DE83C703D2231711E99786665824B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_japanese.dll
- Size 1.8MB
- SHA256 be63e6377817c6a05053bd504f123c46d9e8175752e7c75aff471030d29fdd94
- MD5 617bb0cca8f855107dfdeccb40142d5d
- SHA1 01652216dd23430bb22455c7afec7b1ed618dfce
- SHA512 7cac656593fbf5f3f9c2422a37eb63a89bf5504525118ee2b150251758c202a1a4ad10b36343f48a91d9674ac7ed72839814e6d2b849973dc16c65afa1af30c7
- SSDEEP 12288:6fcHoGxFzLXKGh4ZJe6cwTqREewRJnvr4e4/ed:6fcHo2hUHTh1XRzd
- TLSH T1B895B4CE2476DC59F11CEE781A805F9828CB7C9DE83C34353A31B51EE97C27A5828D96
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_korean.dll
- Size 1.8MB
- SHA256 4d9656b5733fe83d1e9aae9bc4bd7f94aab47af72c7062904f1724690e897dba
- MD5 c31f0efbe2e16169edb3d5370336e4d8
- SHA1 6a170f110587ceba00f373d77c8349f6db415aa8
- SHA512 6ff51c257ca7b17b7762a0529dd7f49064461c96243dd329dcc30266ead9ed51f5fd7611c74191732153537f8364d0a2db60e13526093bb7e7fdd30434b6f8fa
- SSDEEP 12288:pfcHoNcf/jFzLXKGh4ZJe6cwTqREewfXyWc9D8tXM/:pfcHouf/ThUHTh1fXyV9wtXM/
- TLSH T17E95B3DE2476EC58F50CEE781A814F9958CB3C8DA83C343A7A31751EE97C3765828D86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target pl_rsrc_polish.dll
- Size 1.9MB
- SHA256 df313d52ec4154c101dc77683036f5c621c9c27c66612c1fe89aa88339feabc6
- MD5 24d8d8375eb9d846a7a89d04dc0920ad
- SHA1 d692de25b3a0966713c439f5b45d9a12b2b54fa0
- SHA512 51b7775bcccbad6ae6ee068d6f07085a67fa944a5be2be211946cca7e9c86901fa397ebc4377e9ee417846ffaa4fbc88379a3421f6a1351da3e53f986a0fa233
- SSDEEP 6144:KfFa9MmhuV2FFdq7qFrwnim0gsZEeV3dyMXAjFC8fB4adLxp7WGCNE/Jt1icNE/N:KfcHoMmFzLXKGh4ZJe6cwTqREew1
- TLSH T14D95B5CE21B69C54F17AEF781AA05F5818EB3C5DF838703A3631710E997C6B65828B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10