Analysis
-
max time kernel
163s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 23:13
Behavioral task
behavioral1
Sample
1f9f56eaf4b01aac1e330754ffa3709c.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1f9f56eaf4b01aac1e330754ffa3709c.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
1f9f56eaf4b01aac1e330754ffa3709c.exe
-
Size
1.8MB
-
MD5
1f9f56eaf4b01aac1e330754ffa3709c
-
SHA1
c83b04de3a15b8ef49570a964f48a9375f9e3fb8
-
SHA256
96aa19d866c2241cef36d6c0fd8e8526c608ff11e20e1aa1fed21a442d93538e
-
SHA512
cf42bc25b1e3bd7416da9a28d02a60081bc79e2b903ac2f99eff3e696e330c81dd8dec9d1cec5cc650246f6d01a6782c7d39d2940d222eee98814376262398a9
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkH4:SCqm2Jpr0nNM7Dus7Nx2Y
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2416-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x00270000000142a1-5.dat upx behavioral1/memory/2416-774-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 5 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Microsoft Games\Chess\desktop.ini 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Microsoft Games\FreeCell\desktop.ini 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Microsoft Games\Hearts\desktop.ini 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Microsoft Games\Mahjong\desktop.ini 1f9f56eaf4b01aac1e330754ffa3709c.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-keyring-fallback.xml 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipscht.xml 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-compat.xml.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvmstat.xml 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jre7\bin\fxplugins.dll.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Aqtobe.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\eclipse.inf.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook.bat.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UCT 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-snaptracer.xml 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jre7\bin\splashscreen.dll.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\7-Zip\Lang\ba.txt 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Common Files\System\Ole DB\oledb32.dll.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\DVD Maker\Shared\Filters.xml.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-text.xml 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\kinit.exe.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_zh_CN.jar.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_ja_4.4.0.v20140623020002.jar 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.director.nl_zh_4.4.0.v20140623020002.jar.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\jaccess.jar 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-autoupdate-ui.xml 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_zh_HK.properties 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jsse.jar 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port_of_Spain 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.touchpoint.eclipse_2.1.200.v20140512-1650.jar.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-applemenu.jar.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-keymap.xml.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-impl_zh_CN.jar.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_zh_CN.jar.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Antarctica\DumontDUrville 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Common Files\System\msadc\msadcf.dll.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop.wmv 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Internet Explorer\Timeline.dll 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\Asia\Bishkek 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sk.pak.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.ui.zh_CN_5.5.0.165303.jar.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jar.exe.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\content-types.properties.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\jmxremote.access.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core.nl_zh_4.4.0.v20140623020002.jar 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-compat.xml_hidden 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Monticello 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunmscapi.dll 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Paris 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-spi-quicksearch.xml.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jre7\lib\zi\America\Rio_Branco 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\7-Zip\7-zip.dll.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\7-Zip\Lang\tk.txt.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\license.html 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_gtk.css.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jre7\lib\deploy\messages_de.properties 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ulaanbaatar 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-4.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\203x8subpicture.png.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.bat.exe 1f9f56eaf4b01aac1e330754ffa3709c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfxrt.jar 1f9f56eaf4b01aac1e330754ffa3709c.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
809KB
MD506ff9f0c06829acfe1953010cfe98b37
SHA1ba1240c56d8ece7b5362cfb6d99ef600565d3c50
SHA2568b27eece683f3a45c31358e2e4c6c967e5e031fcb85a5d22218aedafff53d600
SHA5125695549ffd4d3b3c7e85dd8c2df77f025e75ec4ce7d563e30390ca4c5f6e3339f84f531f9f2267b68a17a75fb80f65e199cf2d29963846c6a85cf214488ded05