Analysis
-
max time kernel
144s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30-12-2023 01:19
Behavioral task
behavioral1
Sample
09e02cb28ef2a72355c5a7a602ae474c.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
09e02cb28ef2a72355c5a7a602ae474c.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
09e02cb28ef2a72355c5a7a602ae474c.exe
-
Size
1.8MB
-
MD5
09e02cb28ef2a72355c5a7a602ae474c
-
SHA1
07adc904e8e0cde7f3f8d495ccdd3899ca8cbcd3
-
SHA256
82bd34fdc2e3dd2e66f418bdf45dfab2c705308b7a98bb5cac1584873eb7d859
-
SHA512
4103d00631434b6fa698d5bbcab954cd07937da8d5097106d982fba8e69e47294ae17bf0cbcc2afa825d460b393d99bd772f08baefc0d18cced49f0fc7a92f57
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkHs:SCqm2Jpr0nNM7Dus7Nx2M
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1980-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x002c0000000155f7-5.dat upx behavioral1/memory/1980-236-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 09e02cb28ef2a72355c5a7a602ae474c.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\sound.properties 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Monrovia.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\ja-JP\DVDMaker.exe.mui 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssv.dll.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_videoinset.png.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\cloud_Thumbnail.bmp.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\hi.pak.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipscat.xml 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\title_trans_notes.wmv.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\System\ado\msado15.dll 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\System\Ole DB\fr-FR\oledb32r.dll.mui.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\Welcome.html 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Boa_Vista 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\7-Zip\7-zip32.dll.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\System\ado\msadomd.dll.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\mainimage-mask.png 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jstat.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\fontmanager.dll 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\System\Ole DB\ja-JP\oledb32r.dll.mui 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader.dll 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\dt_shmem.dll.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nassau 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\rtstreamsink.ax 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\7-Zip\Lang\sr-spc.txt 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\InkObj.dll.mui.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Ndjamena.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Menominee.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\OFFICE14\msoshext.dll 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\sl-SI\tipresx.dll.mui 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Juan 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\tabskb.dll 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationRight_ButtonGraphic.png 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\Welcome.html.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\El_Aaiun 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msadcfr.dll.mui.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\gu.pak 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\La_Paz.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\java-rmi.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.htm.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\IpsMigrationPlugin.dll 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\en-US\OmdProject.dll.mui 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2ssv.dll.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\mshwLatin.dll.mui.exe 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-back-static.png 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\default_apps\external_extensions.json 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\ij.bat 09e02cb28ef2a72355c5a7a602ae474c.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.bat 09e02cb28ef2a72355c5a7a602ae474c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jsoundds.dll.exe 09e02cb28ef2a72355c5a7a602ae474c.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
42KB
MD52d3244adf07e9fb5f2900464d96b235f
SHA1697f4b915a97deca539d1aa6fce83fb5ee7b3117
SHA2562057b8e1249166b552d2b52ea19b25d8d07076704801e75f6e6ccb9d3cdb67bb
SHA512319226c83ac0640df3347062e046b6606f7ca3cf9044f8709f0a8a1854b6b997af4bd3843e808043775d4fc1ca27a1efaf18cbddac35886d844747ab02973460