44208ca2be6f5a4c21c35c870f5eb4d9f87c426b1356e7bfa1790fabb6b92c4d

Analysis

max time kernel
143s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 00:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

08dbd6298489020137e63e91357cc689.exe
Size

1.8MB
MD5

08dbd6298489020137e63e91357cc689
SHA1

bf2ae92354a3777c3042ab23cff16a373e483be1
SHA256

44208ca2be6f5a4c21c35c870f5eb4d9f87c426b1356e7bfa1790fabb6b92c4d
SHA512

26b76389ac3cf5db319577525858e786cb724836e2eaeafa8b698a4da0634744f88b642d120b720cd56c878ac1780759949895c252bfb780adfa3b6fcef8e4e4
SSDEEP

24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqi:SCqm2Jpr0nNM7Dus7NxH

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2612-0-0x0000000000400000-0x00000000005BA000-memory.dmp	upx
behavioral1/files/0x0036000000016cd7-5.dat	upx
behavioral1/memory/2612-225-0x0000000000400000-0x00000000005BA000-memory.dmp	upx

Drops desktop.ini file(s) 1 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	08dbd6298489020137e63e91357cc689.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\7-Zip\Lang\nn.txt.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\title_stripe.png.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Dot.png	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\scene_button_style_default_Thumbnail.bmp.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ca.pak.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_SelectionSubpicture.png	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Ojinaga	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\106.0.5249.119.manifest.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\7-Zip\History.txt	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\7-Zip\Lang\pt-br.txt.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\mip.exe.mui	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\default.jfc	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Lagos.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\Filters\offfiltx.dll	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipBand.dll.mui	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToNotesBackground.wmv.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ur.pak	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoDev.png.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\7-Zip\Lang\sr-spc.txt	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\v8_context_snapshot.bin.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_zh_TW.jar	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\7-Zip\Lang\zh-tw.txt	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sk.pak.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\th.pak	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\GRAY.pf	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyDrop32x32.gif	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\pl.pak	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Internet Explorer\ieinstal.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jconsole.exe.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\HideDisable.vbe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Internet Explorer\images\bing.ico.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_TW.properties.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrcatlm.dat	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\ExpandUnregister.jpeg	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\System\Ole DB\fr-FR\msdasqlr.dll.mui.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sr.pak.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\rt.jar.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\InkDiv.dll.exe	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\el-GR\tipresx.dll.mui	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightItalic.ttf	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Stucco.gif	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png	08dbd6298489020137e63e91357cc689.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_de.properties.exe	08dbd6298489020137e63e91357cc689.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Krasnoyarsk	08dbd6298489020137e63e91357cc689.exe

C:\Users\Admin\AppData\Local\Temp\08dbd6298489020137e63e91357cc689.exe
"C:\Users\Admin\AppData\Local\Temp\08dbd6298489020137e63e91357cc689.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:2612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\7-Zip\7-zip32.dll.exe

Filesize
530KB

MD5
518f4af69deef475ad869cda26b019e5

SHA1
b71cef1abd4819eb6c007ea2c03b41e85b0c99d1

SHA256
a8649501197f1cdf159a03bb2802e0effb7282e9a42aa94646bf8c62385d398c

SHA512
f73588679cd2befc5d047b3e6b713c4d0f64648b9d75ee290bf7a05d508efee1a2d69dd383c1fd15bcacb39751e1725568e396e7453c01934126645ad9a8cea9

Download Submit
memory/2612-0-0x0000000000400000-0x00000000005BA000-memory.dmp

Filesize
1.7MB

Download
memory/2612-225-0x0000000000400000-0x00000000005BA000-memory.dmp

Filesize
1.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads