Analysis
-
max time kernel
138s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-12-2023 05:57
Behavioral task
behavioral1
Sample
09ca397f462d11201a64833fa0e90c70.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
09ca397f462d11201a64833fa0e90c70.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
09ca397f462d11201a64833fa0e90c70.exe
-
Size
1.8MB
-
MD5
09ca397f462d11201a64833fa0e90c70
-
SHA1
f4a9fd4e7025de17b3c8c50e6dbab60484819678
-
SHA256
82ae9e28c019a8669589d7fea701d33ac212053b9edd4c0167363a9ec88dfc34
-
SHA512
231b80ccbf8bfe0b238a20031cca76a71e042134b7a2e42e70decb8ee1c8b590076c994f1cc896aa01a4f9c810661f1a4f8e2950bcc69617817568b7af54e5a8
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqZ:SCqm2Jpr0nNM7Dus7Nx0
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2496-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x0034000000016c8f-5.dat upx behavioral1/memory/2496-221-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 09ca397f462d11201a64833fa0e90c70.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\tr.pak 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ko-KR\tipresx.dll.mui 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_matte2.wmv 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\ShapeCollector.exe.mui 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_heb.xml 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrcommonlm.dat 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc.exe 09ca397f462d11201a64833fa0e90c70.exe File opened for modification C:\Program Files\7-Zip\Lang\ar.txt 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\CsiSoap.dll.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipBand.dll.mui 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-over-select.png 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport_mask_left.png.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\System\Ole DB\msxactps.dll 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ta.pak.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\DVDMaker.exe.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\OmdProject.dll 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_ButtonGraphic.png 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm.exe 09ca397f462d11201a64833fa0e90c70.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\VC\msdia90.dll 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml 09ca397f462d11201a64833fa0e90c70.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\manifest.json 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\System\msadc\msdarem.dll.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_SelectionSubpicture.png.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\whitemenu.png.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\ja-JP\msinfo32.exe.mui 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\ja-JP\MSTTSLoc.dll.mui 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground_PAL.wmv 09ca397f462d11201a64833fa0e90c70.exe File opened for modification C:\Program Files\7-Zip\Lang\si.txt 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_jpn.xml 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Eurosti.TTF.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\7-Zip\Lang\pl.txt.exe 09ca397f462d11201a64833fa0e90c70.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\System\ado\msado28.tlb.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\Bear_Formatted_MATTE2_PAL.wmv.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\7-Zip\Lang\fr.txt.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\7-Zip\Lang\sr-spl.txt.exe 09ca397f462d11201a64833fa0e90c70.exe File opened for modification C:\Program Files\7-Zip\Lang\tk.txt 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\System\Ole DB\fr-FR\sqloledb.rll.mui.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialoccasion.png.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Tiki.gif.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\vistabg.png 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msadcfr.dll.mui 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\7-Zip\Lang\yo.txt.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui.exe 09ca397f462d11201a64833fa0e90c70.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png.exe 09ca397f462d11201a64833fa0e90c70.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD5417ce5161004077eb79fbab264cad99a
SHA13fabc92b2cffd6a8a0db8a115528f33c3d410a9b
SHA256196df193e9c124933defc74e06f60f41147cf43778393ebd55ecccad4bd1dbd9
SHA512e9defbae5c16a092d403e3dae86f5ecb45dabc6d4a3c2fce74542308c5e22ecfd2a1e461593c8544868f7ffaa8d73ceffc685998a212986fc02b5a17bf948794