78a7b788fb407ad83ff1eca804d9eb912fab73fd583478f4e165b886c4f200d8

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 20:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0305fc543c6f8ddd04cd2709c16581cf.exe
Size

275KB
MD5

0305fc543c6f8ddd04cd2709c16581cf
SHA1

2fa754a6b3dd80971c9336c3945fb938690e4d91
SHA256

78a7b788fb407ad83ff1eca804d9eb912fab73fd583478f4e165b886c4f200d8
SHA512

bb5b185f905d9fd1bec7ac478ed92968ceb8332df7ea21ad66afac06133a79442b94a9d08165d2ca90a14a297439ff4222e18b5beddfe066e1ca19412a4d59e9
SSDEEP

3072:ynEOlACIzymfBn7ipFrnCusFPdnEOlACIzymfBn7ipFrnCusFPcnEOlACIzymfBO:wNmft7iTnerNmft7iTnemNmft7iTnek

Score

6^/10

Malware Config

Signatures

Drops desktop.ini file(s) 6 IoCs

description	ioc	Process
File created	\??\c:\Program Files\desktop.ini	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\desktop.ini	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\$Recycle.Bin\S-1-5-21-3427588347-1492276948-3422228430-1000\desktop.ini	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\$Recycle.Bin\S-1-5-21-3427588347-1492276948-3422228430-1000\desktop.ini	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	0305fc543c6f8ddd04cd2709c16581cf.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\ja-JP\MSTTSLoc.dll.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\DVD Maker\WMM2CLIP.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Internet Explorer\D3DCompiler_47.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Sitka	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.properties	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\tabskb.dll.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\System\es-ES\wab32res.dll.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\include\jvmticmlr.h	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\instrument.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\servertool.exe	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\mshwLatin.dll.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\MSInfo\fr-FR\msinfo32.exe.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Tucuman	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\de-DE\InkWatson.exe.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\npt.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rankin_Inlet	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\NavigationRight_SelectionSubpicture.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\de-DE\msdaremr.dll.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_ButtonGraphic.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\Parity.fx	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Stanley	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\GRAY.pf	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Halifax	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureA.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Push\1047_576black.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\COPYRIGHT	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cayenne	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Grand_Turk	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Srednekolymsk	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\Common Files\System\Ole DB\sqloledb.rll	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\te.pak	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\psfont.properties.ja	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\cursors.properties	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nome	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baku	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\db\bin\ij	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+12	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\IPSEventLogMsg.dll.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\DVD Maker\en-US\OmdProject.dll.mui	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\Internet Explorer\iexplore.exe	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2iexp.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+11	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\hi.txt	0305fc543c6f8ddd04cd2709c16581cf.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\203x8subpicture.png	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\eventlog_provider.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sw.pak	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxwebkit.dll	0305fc543c6f8ddd04cd2709c16581cf.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Enderbury	0305fc543c6f8ddd04cd2709c16581cf.exe

C:\Users\Admin\AppData\Local\Temp\0305fc543c6f8ddd04cd2709c16581cf.exe
"C:\Users\Admin\AppData\Local\Temp\0305fc543c6f8ddd04cd2709c16581cf.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:1636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

Filesize
5.8MB

MD5
2abf7c7c9788fb0c8ac3bc1e6bd2dfcf

SHA1
2ccd6d0a58c548f013f999029ee5381cae4120e0

SHA256
8d925f051957baf206f054ce93c3b2617821a75d4eeb92ec13abd76abfc87cb7

SHA512
07425db1f9952fa191a4f2234720a88525c5136d6e5e3699db41d465b04a3bd2bb5ae0639b0d4ffca3cd8fe98f1598d1e9c1dda7625ebab3d073435be8e38df8

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr.jar

Filesize
5B

MD5
b5b682b742431a52ea8b17c72ad9c572

SHA1
326320f469235708c59f678c9a7357dca552d306

SHA256
30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

SHA512
4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
386b6087dd9575fc6b8ada0f7a463723

SHA1
5373d4ffd89438a60b8ae0858c3bc4e8d37f540a

SHA256
ef494685ac9644ba5672cfc49c6efe5e09a2d71706d5cf4b57171f7d5f7a70d1

SHA512
1d39dd2dd736431ebe0e7f16a9f10b748e522cfee03a187ad020708e48ed676a21eef6b3ac3b1f600cff2e19f1d30ca25f682fe773650b3fc97e20f0afd8557b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html

Filesize
8KB

MD5
8ed35e04c7556933d923ee706f8312d7

SHA1
15b0c7aae539b756640e9d28e6f68d82bd5b9294

SHA256
f2f8e2280b4118ce0ecbf0c58b73fba5e9666f8cdb53fabe8a1fb6fbcd48e2c7

SHA512
3f37e8d86d9495f5a5ba4639c2b178d8c3ce0236d4578638630fc901fd4c6d0d40fd3e57e0e28ad9e049295425864a14bf32d1368769e19e749226c5ff84e84b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf

Filesize
62B

MD5
f6dbc4b34179e10f9b6c0e2d5d24c2c6

SHA1
1c53d71700022886c41b568a9514924fd3c1c62b

SHA256
05df06e24037881941804db6ca15f7a25dd10a536b0f642e7a3d09de07256206

SHA512
25a2bc555f2e49610a0490377bf687188f7e13931cbd8e29482584e552b65a2e51fe84fa5153825517a011d7b65df831911c302ae482b23fa0b118524e8af24b

Download Submit
memory/1636-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1636-245-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/1636-1165-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads