Analysis
-
max time kernel
149s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/12/2023, 12:48
Behavioral task
behavioral1
Sample
6fb05299692ced8fbc7f9343b2e56b6b.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
6fb05299692ced8fbc7f9343b2e56b6b.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
6fb05299692ced8fbc7f9343b2e56b6b.exe
-
Size
1.8MB
-
MD5
6fb05299692ced8fbc7f9343b2e56b6b
-
SHA1
ec8b4c1cebdf9ce1f1ebcb5e76d77dd646a01f85
-
SHA256
b229d93f81693e0f6899ee884c95451ab4355352e72d050efa7c9ad37eaabe27
-
SHA512
57c24808a3bf3e28fe9a52c8805ea9df69d46e1420c4ee1422ece0c78437a091d4f7588b28501df094f9df22f5d3e7f8f640471f5d6111e0e0a3b30dbbad6e53
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHV:SCqm2Jpr0nNM7Dus7Nx21
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2444-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x0028000000015596-5.dat upx behavioral1/memory/2444-708-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 6fb05299692ced8fbc7f9343b2e56b6b.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha2.png.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Internet Explorer\networkinspection.dll.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Tallinn 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\7-Zip\7-zip.chm.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\pack200.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\GRAY.pf 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Kiev.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\System\msadc\msadcf.dll 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\highlight.png 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jrunscript.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\calendars.properties.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\flavormap.properties 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\System\Ole DB\en-US\oledb32r.dll.mui 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\LightBlueRectangle.PNG.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\dnsns.jar.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_es.jar.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montevideo.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\System\msadc\it-IT\msdaprsr.dll.mui 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Internet Explorer\msdbg2.dll.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.war.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\micaut.dll 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\java.policy.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\IpsMigrationPlugin.dll.mui 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-highlight.png 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ko.pak.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\7-Zip\Lang\zh-cn.txt.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Rio_Gallegos.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Currie 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Mauritius 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.bat 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightRegular.ttf 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\System\msadc\msadcs.dll.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\pt-PT.pak 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ru.pak.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_CN.jar 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Salta.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\HST 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InputPersonalization.exe.mui.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\msdasqlr.dll.mui 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationUp_ButtonGraphic.png 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Internet Explorer\en-US\F12Resources.dll.mui 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\System\msadc\adcjavas.inc 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationRight_SelectionSubpicture.png.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-9 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground_PAL.wmv.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\javac.exe.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\dnsns.jar 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+4.exe 6fb05299692ced8fbc7f9343b2e56b6b.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\ParentMenuButtonIcon.png 6fb05299692ced8fbc7f9343b2e56b6b.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD539751246cb1c2a5f3b4341c9c03e4303
SHA11652736343862fdaffc47bb14f43592fba20d5fd
SHA2563e6820c51b67f4244382d603d18589bac7e61643ee49504c397cf72d087c6d62
SHA512444905521a7360d274b42e4ad8614b18534dd2a599306433021b72f8cfc1c03b39ce4e8059696ad828bbd259c50897fcc56fa1f714f0e0cf2b640a987822d17e