313243fc6117fa482eef727ef1a4a0f9dee1c002a1d8e3c1759017ac0939f10b

Analysis

max time kernel
149s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 01:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1fd816345f1889d20275834c7f070d28.exe
Size

1.8MB
MD5

1fd816345f1889d20275834c7f070d28
SHA1

dde484ccffa9be289478216327f7f641ca38fb14
SHA256

313243fc6117fa482eef727ef1a4a0f9dee1c002a1d8e3c1759017ac0939f10b
SHA512

07798d62c3500c74a42d9a2c8ab1de602063f9bed20351c4a38ee8dc212df6a5d4a533c4344fefc8eeef9aeeb9543fce7aaaf06c11a77576b092059cb5ded154
SSDEEP

24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHW:SCqm2Jpr0nNM7Dus7Nx22

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2496-0-0x0000000000400000-0x00000000005BA000-memory.dmp	upx
behavioral1/files/0x0034000000016c8f-5.dat	upx
behavioral1/memory/2496-237-0x0000000000400000-0x00000000005BA000-memory.dmp	upx

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	1fd816345f1889d20275834c7f070d28.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\pt-BR.pak	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\System\msadc\msadcer.dll.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\cs-CZ\tipresx.dll.mui.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\curtains.png	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground.wmv	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\ja-JP\WMM2CLIP.dll.mui	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\kinit.exe	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred\oskpredbase.xml.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipBand.dll.mui.exe	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxmedia.dll	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\7-Zip\Lang\an.txt	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\javaws.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\MSInfo\es-ES\msinfo32.exe.mui.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\MSInfo\it-IT\msinfo32.exe.mui.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\policytool.exe.exe	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\7-Zip\Lang\az.txt	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\FlickLearningWizard.exe.mui.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME-JAVAFX.txt.exe	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\bin\jawt.dll	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\7-Zip\Lang\sw.txt.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\es-ES\WMM2CLIP.dll.mui.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\en-GB.pak.exe	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\jmap.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\System\msadc\it-IT\msadcer.dll.mui	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\npjp2.dll.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\es.pak.exe	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\eventlog_provider.dll	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\bin\awt.dll	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_SelectionSubpicture.png.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\DvdTransform.fx.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\es-ES\OmdProject.dll.mui.exe	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\THIRDPARTYLICENSEREADME-JAVAFX.txt	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\System\ado\en-US\msader15.dll.mui.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\sonicsptransform.ax.exe	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_100_percent.pak	1fd816345f1889d20275834c7f070d28.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\7-Zip\Lang\gu.txt.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\vstoee.dll.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\System\Ole DB\oledbvbs.inc.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoDev.png.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\Common Files\System\msadc\msdaremr.dll.exe	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png	1fd816345f1889d20275834c7f070d28.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png.exe	1fd816345f1889d20275834c7f070d28.exe

C:\Users\Admin\AppData\Local\Temp\1fd816345f1889d20275834c7f070d28.exe
"C:\Users\Admin\AppData\Local\Temp\1fd816345f1889d20275834c7f070d28.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:2496

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\7-Zip\7-zip32.dll.exe

Filesize
478KB

MD5
2e36401b28d9be807586d935e6ec75e4

SHA1
7bff24b097f50faa137f61c97bbda875559dfb2c

SHA256
c8df33ca979f1e207292837ea662d1df7d9337fa330950c54483db7ad64b5298

SHA512
5bedfcf6bfba85f975d53622f53b6c34b975c1ca303e92101466e12c61af107d0462ec0383315af88ea9322961febd65e79fb81d5245ea35fa453f117c176c33

Download Submit
memory/2496-0-0x0000000000400000-0x00000000005BA000-memory.dmp

Filesize
1.7MB

Download
memory/2496-237-0x0000000000400000-0x00000000005BA000-memory.dmp

Filesize
1.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads