Analysis
-
max time kernel
145s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/12/2023, 03:48
Behavioral task
behavioral1
Sample
519cb2b890791e24478b33eda7967b65.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
519cb2b890791e24478b33eda7967b65.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
519cb2b890791e24478b33eda7967b65.exe
-
Size
1.8MB
-
MD5
519cb2b890791e24478b33eda7967b65
-
SHA1
54904590f7a54682b34f2d39de16541daa1e3cdc
-
SHA256
580b5d8c1b735c2b5c0b0a2de2fd92c15c83f4667060805ebe39b858d1578f85
-
SHA512
fd637ae4fd4fba41a1865cbfe578638cc1be593e61d0b37ba76d83282cae975aa1b437b771bc87a43a5b322bb2100d3ad938d26694f4cda70c67d764eeebc80d
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqB:SCqm2Jpr0nNM7Dus7Nx0
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2132-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x0030000000016ced-5.dat upx behavioral1/memory/2132-387-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 519cb2b890791e24478b33eda7967b65.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\Microsoft.Ink.dll.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_CN.jar.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxwebkit.dll.exe 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\invalid32x32.gif 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\management.properties 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_kor.xml.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\System\Ole DB\en-US\sqloledb.rll.mui 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\optimization_guide_internal.dll 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_PreComp_MATTE_PAL.wmv.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\1047x576black.png.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_de_DE.jar.exe 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\7-Zip\Lang\ne.txt 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\7-Zip\License.txt 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrcatsh.dat.exe 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxwebkit.dll 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\hi.pak.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Internet Explorer\jsdbgui.dll.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tabskb.dll.mui.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\tipresx.dll.mui 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwritalm.dat 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_ButtonGraphic.png.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\Passport.wmv 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javadoc.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\servertool.exe.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\Filters\VISFILT.DLL.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\System\msadc\fr-FR\msdaprsr.dll.mui.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha2.png 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader_icd.json 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\7-Zip\7z.sfx 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\IpsMigrationPlugin.dll.mui 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png.exe 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiItalic.ttf 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\System\ado\msadox.dll 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png.exe 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\3RDPARTY 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\awt.dll.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\System\msadc\ja-JP\msaddsr.dll.mui.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_SelectionSubpicture.png 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Internet Explorer\MemoryAnalyzer.dll.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Internet Explorer\en-US\networkinspection.dll.mui.exe 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_de.properties 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr.jar.exe 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\7-Zip\Lang\sw.txt 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_ButtonGraphic.png 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_babypink_Thumbnail.bmp 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sk.pak 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\7-Zip\Lang\ca.txt 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\7-Zip\Lang\gl.txt 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwresslm.dat 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_ButtonGraphic.png 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576black.png.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Internet Explorer\jsprofilerui.dll.exe 519cb2b890791e24478b33eda7967b65.exe File opened for modification C:\Program Files\7-Zip\Lang\fr.txt 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png.exe 519cb2b890791e24478b33eda7967b65.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\attach.dll.exe 519cb2b890791e24478b33eda7967b65.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD515c7fac543bae96c0beb84949a84c286
SHA18c7c8ce84c563ffd9d0281998b0926600fb60289
SHA256071d18c24e85221bf5b6b89e34bab5e5275fb990bbee0ef8dadc726ebce6d5cc
SHA5122125eb416c6119edb538ea7bb90ec70592da292a63e4056f2e13c5c890dc67ab82a66c270ca327a750734e3055c7451e45bb2f941137fbec89ab3bd3a9e6d688