Analysis
-
max time kernel
154s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26-12-2023 03:19
Behavioral task
behavioral1
Sample
4fbbdcf6c37189f87a986d2dbfe23da6.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
4fbbdcf6c37189f87a986d2dbfe23da6.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
4fbbdcf6c37189f87a986d2dbfe23da6.exe
-
Size
1.8MB
-
MD5
4fbbdcf6c37189f87a986d2dbfe23da6
-
SHA1
f14e23c21cd7aa00a458ae538a2c423850e7417b
-
SHA256
af1745364623b7eb5d6dc0e2c167378fe9eebaa9752405208bad426acdb1625a
-
SHA512
4788968e3641ae42152a6a15534bdb16d58a3ab1c6ddb9ab174942552896f4929de60b530312add9d86fb236fe9b72d700744f3420b5c4f5b22c3f77a84da7a9
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHQ:SCqm2Jpr0nNM7Dus7Nx2w
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2740-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x00360000000152bc-5.dat upx behavioral1/memory/2740-24-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 4fbbdcf6c37189f87a986d2dbfe23da6.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\MEIPreload\manifest.json.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Internet Explorer\en-US\F12.dll.mui.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipBand.dll.mui 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_SelectionSubpicture.png 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\7-Zip\Lang\si.txt.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\ShapeCollector.exe.mui.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javap.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pt_BR.jar.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\correct.avi.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\203x8subpicture.png.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Internet Explorer\Timeline.cpu.xml.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\apt.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File opened for modification C:\Program Files\7-Zip\Lang\ko.txt 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(cm).wmf.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png 4fbbdcf6c37189f87a986d2dbfe23da6.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\README.txt 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\deploy.dll.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_LOOP_BG.wmv 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\System\msadc\msdfmap.dll.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_RGB_PAL.wmv 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\it-IT\DVDMaker.exe.mui 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jvisualvm.exe.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.bat.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Internet Explorer\en-US\jsprofilerui.dll.mui.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-next-static.png.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\Parity.fx 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jmc.exe.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\mshwLatin.dll.mui.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\sqloledb.rll.mui 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\bg.pak 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\Welcome.html.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\mshwLatin.dll.mui.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\Services\verisign.bmp 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msadcor.dll.mui 4fbbdcf6c37189f87a986d2dbfe23da6.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\te.pak 4fbbdcf6c37189f87a986d2dbfe23da6.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyrun.jar.exe 4fbbdcf6c37189f87a986d2dbfe23da6.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD5d12790e343e5b9ef8d83d58d2c09cb06
SHA1ef5a2f0bd0943e819cdc91f6daad190c33adce16
SHA2568a90fdc99b161ae3fe9965a68dfb0394da3f5489e249b26c9446f93cbbeda0eb
SHA5128e68d042181547e387424061b72d8adf5c596ceab25eff2b24a05f48fcb436fbba08a93415c37344eed27dc68768f91986f436acd5a4e0f6f79c206ec3067c87