Analysis
-
max time kernel
148s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25-12-2023 14:04
Behavioral task
behavioral1
Sample
241d2e0822cefa98c5cb3eefdd1810ad.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
241d2e0822cefa98c5cb3eefdd1810ad.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
241d2e0822cefa98c5cb3eefdd1810ad.exe
-
Size
1.8MB
-
MD5
241d2e0822cefa98c5cb3eefdd1810ad
-
SHA1
1755428961fd3700d6b3c9b508e8cf73d7398090
-
SHA256
274f4843260edb7ad763dcdcb9aaded79e91d0cb34b603181653227523473788
-
SHA512
01d3cf5d0bfcfe2b35e57fbf62dd6d1cf86395902243db31c3433d0859abfa9f646fb7802075951763f1ea886ed9cf3fcc6d740964501659c17410e1963ab89a
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqA:SCqm2Jpr0nNM7Dus7Nx9
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/368-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x0031000000016fe9-5.dat upx behavioral1/memory/368-310-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 241d2e0822cefa98c5cb3eefdd1810ad.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\System\Ole DB\msdaps.dll.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG_PAL.wmv 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\da.pak 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\hu.pak 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\lt.pak 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Memo.emf.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\7-Zip\Lang\kk.txt 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_ButtonGraphic.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\fa.pak 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\ShapeCollector.exe.mui.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\MEIPreload\manifest.json 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\7-Zip\Lang\ky.txt 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\7-Zip\Lang\ms.txt.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\ea-sym.xml.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_rtl.xml 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ConvertInkStore.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\micaut.dll.mui.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoDev.png.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\7-Zip\Lang\va.txt.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationUp_SelectionSubpicture.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipRes.dll.mui 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passportcover.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\7-Zip\Lang\nb.txt.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\rtscom.dll.mui.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\7-Zip\Lang\va.txt 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\chapters-static.png.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\7-Zip\Lang\es.txt 241d2e0822cefa98c5cb3eefdd1810ad.exe File opened for modification C:\Program Files\7-Zip\Lang\uk.txt 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_precomp_matte.wmv.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-back-static.png.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad.xml.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMain.wmv 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\Common Files\System\fr-FR\wab32res.dll.mui.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv.exe 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png 241d2e0822cefa98c5cb3eefdd1810ad.exe File created C:\Program Files\DVD Maker\bod_r.TTF 241d2e0822cefa98c5cb3eefdd1810ad.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
161KB
MD5c264cc1e82594c9c71c7fa3c1e586eb2
SHA17027211b9264b2b4198f2aa57465c508a3a83023
SHA256e50a4e6f37ab5d1d530aa16f0dc29de065a622ec539be2f241ac091daf37f999
SHA5125ff40061a56bb5d9052103103a8ed88f1b962739259097648cb6e8a66afb264430d09eed6facc4dc2488810000dceacc767f3fc62061b6c6d5a6a65fbf73a8c1