Analysis
-
max time kernel
149s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/12/2023, 05:05
Behavioral task
behavioral1
Sample
568977ba42755edf03365f4908717699.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
568977ba42755edf03365f4908717699.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
568977ba42755edf03365f4908717699.exe
-
Size
1.8MB
-
MD5
568977ba42755edf03365f4908717699
-
SHA1
a5891c94876ecef64b2a0349ec6766a809d1bc45
-
SHA256
235fb6e50be0b0561f43a0f9198c91271f1774967731822562d55ccf945cd240
-
SHA512
005b3c90b959303734bd9b1f4ba10826f46cd6a535cd6157e6939fd4ba884b83365e2be63a857574e01ed52082d020759a02b7b64d45156a893e2aa2b17d98ff
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkH/:SCqm2Jpr0nNM7Dus7Nx2f
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1536-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x0038000000015471-5.dat upx behavioral1/memory/1536-324-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 568977ba42755edf03365f4908717699.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\15x15dot.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\System\msadc\msdarem.dll 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\de-DE\OmdProject.dll.mui.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\System\Ole DB\msdaps.dll.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-split.avi.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\mip.exe.mui.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base.xml.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\fr-FR\MSTTSLoc.dll.mui 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_ButtonGraphic.png 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NavigationButtonSubpicture.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576black.png 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\System\msadc\adcjavas.inc 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\IPSEventLogMsg.dll.mui 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\System\Ole DB\sqlxmlx.dll 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Java\jdk1.7.0_80\README.html.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\Filters\msgfilt.dll.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\OrangeCircles.jpg.exe 568977ba42755edf03365f4908717699.exe File opened for modification C:\Program Files\7-Zip\7zCon.sfx 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIcon.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Internet Explorer\pdmproxy100.dll.exe 568977ba42755edf03365f4908717699.exe File opened for modification C:\Program Files\7-Zip\Lang\az.txt 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Connectivity.gif.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\System\msadc\adcvbs.inc 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\OmdBase.dll 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png 568977ba42755edf03365f4908717699.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\idlj.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\System\wab32res.dll.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_SelectionSubpicture.png 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\msinfo32.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_scene.wmv.exe 568977ba42755edf03365f4908717699.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ca.pak 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Internet Explorer\F12.dll 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\System\ado\it-IT\msader15.dll.mui 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Services\verisign.bmp.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png.exe 568977ba42755edf03365f4908717699.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\scenesscroll.png 568977ba42755edf03365f4908717699.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.exe 568977ba42755edf03365f4908717699.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD511a065313bcc27fa9327f2254107f547
SHA189c558379f49ee3cbffed903bc04011d5e4c5fe3
SHA256db91484ad490e86a8c83c6cf22fa7f24ee71e5cc428e055d6fb5e093709b5600
SHA51250873e003e8dc8b62b48da038ceaa51a552760344a8a1c31005f03aefbb83d7e8be2836fa141a4500836ccdfff9b757d1e91863d9b9004832519dd222624398a