faabb3042c11be05f72c0d71bea69e288318f041c55ffb9f5cbfc2746b5b4b22

Analysis

max time kernel
133s
max time network
151s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 09:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1438627178676da7924ca9e1c72f0b15.exe
Size

288KB
MD5

1438627178676da7924ca9e1c72f0b15
SHA1

499b24468a4b6981e1c6a5d2732a9cb8b8d5871a
SHA256

faabb3042c11be05f72c0d71bea69e288318f041c55ffb9f5cbfc2746b5b4b22
SHA512

2c990426d517fdfe42f9826c2bc21f5fea2c096567839e79c7f9724a75e849557a78a9990bb0eaafbe3318954c762a56cdd4f4e4816e5204ebf2e55b232660ad
SSDEEP

6144:Hq+TyiziFmJmxhqYxhk6spHZO8qnuw4kYc+jjMlwI:1Xz8mJmxhqYxhQw8qu/A+0mI

Score

6^/10

Malware Config

Signatures

Drops desktop.ini file(s) 6 IoCs

description	ioc	Process
File created	\??\c:\$Recycle.Bin\S-1-5-21-452311807-3713411997-1028535425-1000\desktop.ini	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\$Recycle.Bin\S-1-5-21-452311807-3713411997-1028535425-1000\desktop.ini	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\desktop.ini	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\desktop.ini	1438627178676da7924ca9e1c72f0b15.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	\??\c:\Program Files\Internet Explorer\ielowutil.exe	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\instrument.dll	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\tr.txt	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\it-IT\mip.exe.mui	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Dotted_Lines.emf	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\fr-FR\MSTTSLoc.dll.mui	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Macau	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\ShadesOfBlue.jpg	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\libEGL.dll	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Abidjan	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Phoenix	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Copenhagen	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Dublin	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\imjplm.dll	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\MSInfo\it-IT\msinfo32.exe.mui	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-shadow.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bahia_Banderas	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Luxembourg	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Guadalcanal	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\bin\jmap.exe	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Common Files\System\msadc\ja-JP\msaddsr.dll.mui	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_SelectionSubpicture.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrome.7z	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Internet Explorer\sqmapi.dll	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\nio.dll	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\circle_glass_Thumbnail.bmp	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Tell_City	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\London	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPCEXT.DLL	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSFrontendENU.dll	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Common Files\System\Ole DB\es-ES\sqlxmlx.rll.mui	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\meta-index	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\MANIFEST.MF	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\IPSEventLogMsg.dll.mui	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\bin\decora-sse.dll	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunec.jar	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\he-IL\tipresx.dll.mui	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\Common Files\System\msadc\handler.reg	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Havana	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationUp_SelectionSubpicture.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\NextMenuButtonIconSubpictur.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_SelectionSubpicture.png	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-image-inset.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\CompareClear.bmp	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\DVD Maker\WMM2CLIP.dll	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Internet Explorer\en-US\F12Resources.dll.mui	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\about.html	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\InkWatson.exe.mui	1438627178676da7924ca9e1c72f0b15.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\vintage.png	1438627178676da7924ca9e1c72f0b15.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ms.pak	1438627178676da7924ca9e1c72f0b15.exe

C:\Users\Admin\AppData\Local\Temp\1438627178676da7924ca9e1c72f0b15.exe
"C:\Users\Admin\AppData\Local\Temp\1438627178676da7924ca9e1c72f0b15.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:2900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

Filesize
1.1MB

MD5
fdb8e27ce062a48d41385033a82e10df

SHA1
27eef38f24fcf4c3d6d299b163136f7c8ba8ef60

SHA256
88ace3a5a6995fa40554876551440b7365c59034f8f3a9d8999f479dca8b6cce

SHA512
4a7d225a21725ce303abd4771c5143fbb8a44199690e437bf1db37484f54a1a316cfbe34b7d2df5957f3e5d1c923b8222ae9f3cccfd3367b8ac3a37ebb0b5377

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\localedata.jar

Filesize
5B

MD5
b5b682b742431a52ea8b17c72ad9c572

SHA1
326320f469235708c59f678c9a7357dca552d306

SHA256
30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

SHA512
4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
386b6087dd9575fc6b8ada0f7a463723

SHA1
5373d4ffd89438a60b8ae0858c3bc4e8d37f540a

SHA256
ef494685ac9644ba5672cfc49c6efe5e09a2d71706d5cf4b57171f7d5f7a70d1

SHA512
1d39dd2dd736431ebe0e7f16a9f10b748e522cfee03a187ad020708e48ed676a21eef6b3ac3b1f600cff2e19f1d30ca25f682fe773650b3fc97e20f0afd8557b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html

Filesize
8KB

MD5
8ed35e04c7556933d923ee706f8312d7

SHA1
15b0c7aae539b756640e9d28e6f68d82bd5b9294

SHA256
f2f8e2280b4118ce0ecbf0c58b73fba5e9666f8cdb53fabe8a1fb6fbcd48e2c7

SHA512
3f37e8d86d9495f5a5ba4639c2b178d8c3ce0236d4578638630fc901fd4c6d0d40fd3e57e0e28ad9e049295425864a14bf32d1368769e19e749226c5ff84e84b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf

Filesize
62B

MD5
f6dbc4b34179e10f9b6c0e2d5d24c2c6

SHA1
1c53d71700022886c41b568a9514924fd3c1c62b

SHA256
05df06e24037881941804db6ca15f7a25dd10a536b0f642e7a3d09de07256206

SHA512
25a2bc555f2e49610a0490377bf687188f7e13931cbd8e29482584e552b65a2e51fe84fa5153825517a011d7b65df831911c302ae482b23fa0b118524e8af24b

Download Submit
memory/2900-0-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2900-123-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2900-244-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2900-263-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download
memory/2900-1184-0x0000000000400000-0x000000000040A000-memory.dmp

Filesize
40KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads