Overview

overview

10

Static

static

10

cb673d417b...85.exe

windows7-x64

9

cb673d417b...85.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    189s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    12-10-2023 07:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cb673d417b2f650cafee53c2dab9552b482b9c20054977d0444f427567cbd585.exe

  • Size

    146KB

  • MD5

    753fb0a684edf1cfacd99e3ce8bd08c0

  • SHA1

    febb4394e71f9ac92c351599ced9614780d95cde

  • SHA256

    cb673d417b2f650cafee53c2dab9552b482b9c20054977d0444f427567cbd585

  • SHA512

    d789f940af8acdb23de4192cbdfbc0f3ce1c335ca49539251826c211cd09ac79c445fae0c8f524b6c3fa90d5c392bc1b053a23caaf090eea0460397fd589e387

  • SSDEEP

    1536:7zICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xDv77erNHjqXKCkqEZYqI3AJ5cWs:EqJogYkcSNm9V7Dj8HjqV2QmnOHRT

Score
9/10
ransomwarespywarestealer

Malware Config

Signatures

  • Renames multiple (329) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

    ransomware
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Drops desktop.ini file(s) 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 38 IoCs
  • Suspicious use of AdjustPrivilegeToken 35 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cb673d417b2f650cafee53c2dab9552b482b9c20054977d0444f427567cbd585.exe
    "C:\Users\Admin\AppData\Local\Temp\cb673d417b2f650cafee53c2dab9552b482b9c20054977d0444f427567cbd585.exe"
    1⤵
    • Drops desktop.ini file(s)
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1924

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\AAAAAAAAAAA
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\BBBBBBBBBBB
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\CCCCCCCCCCC
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\DDDDDDDDDDD
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\DDDDDDDDDDD
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\EEEEEEEEEEE
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\FFFFFFFFFFF
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\GGGGGGGGGGG
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\HHHHHHHHHHH
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\IIIIIIIIIII
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\JJJJJJJJJJJ
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\KKKKKKKKKKK
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\LLLLLLLLLLL
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\MMMMMMMMMMM
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\NNNNNNNNNNN
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\OOOOOOOOOOO
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\PPPPPPPPPPP
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\QQQQQQQQQQQ
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\RRRRRRRRRRR
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\SSSSSSSSSSS
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\TTTTTTTTTTT
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\UUUUUUUUUUU
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\VVVVVVVVVVV
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\WWWWWWWWWWW
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\XXXXXXXXXXX
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\YYYYYYYYYYY
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\$Recycle.Bin\S-1-5-21-3750544865-3773649541-1858556521-1000\desktop.ini
    Filesize

    129B

    MD5

    31d0555765aee46fb356c9cb3b5062ac

    SHA1

    75dc905d8424e53c9006a97b0206373af5af404c

    SHA256

    bb3900932e39be93f3e2caf618bec45b5c1f5c10e68ed2625bef232147fe6750

    SHA512

    2fafc1ef351b1c79aba04485e941cbd31aeb940518bba519fe410b382c1108c21e3d6f7bceb5bedca942fa5a85261dede3c580d8c230b15d7b760d323792539c

    Download Submit

  • C:\PMN1vWzE2.README.txt
    Filesize

    479B

    MD5

    9116dc4539fb1c5381cf7d6eb16015ef

    SHA1

    3aba0eef1367dc3a5abc5281fb041c8d2a3c9769

    SHA256

    c66eaf14c59ba5250def3621f4fd76a95a9da4a2c8c76647f12f2791748cad24

    SHA512

    0912c3138fd78e2a891713ec9fa91c5cb63b0c347ab5e9b9d120b824f2eadb5155ef9dcee8af909c2ed29bb30fdababa902c9e1f0bcca680be97643bc628c503

    Download Submit

  • F:\$RECYCLE.BIN\S-1-5-21-3750544865-3773649541-1858556521-1000\DDDDDDDDDDD
    Filesize

    129B

    MD5

    3da1bd3744a3abe8071371e012349b3a

    SHA1

    204f0567d92cceda11e4bf6c122571c9e74a2a0a

    SHA256

    64ce6d0a532042b6e5a6989cfb4e7846585d0002f3c379d99f2d49b0c4ea7867

    SHA512

    67b296728160b2be5849d9a1f4f458c6a3e450d21c02723ec59557c75af80c4fa9f779d69b41ed936794d6fabcc437ac39a64e24747477f2b7596fd5d72e2fcd

    Download Submit

  • memory/1924-0-0x0000000000C00000-0x0000000000C40000-memory.dmp

    Filesize

    256KB

    Download