Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
30/12/2023, 08:26
Behavioral task
behavioral1
Sample
135dee814858b127643bb04096cd232a.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
135dee814858b127643bb04096cd232a.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
135dee814858b127643bb04096cd232a.exe
-
Size
1.8MB
-
MD5
135dee814858b127643bb04096cd232a
-
SHA1
ad125decb39705735edea77a6736b7ff1b8aafbc
-
SHA256
a1675807f924e5bd8594ea296c6428af376bb86f11810650e9cc8db706f38fb9
-
SHA512
6446594b7a998b0fcbbf1d2c853cf14f0bd672907e11692966bc559791ef79d7925660158a6bb60b775f1e545aa8b436ce5036df689007b39ccfdf488322f198
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqg:SCqm2Jpr0nNM7Dus7Nx1
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1156-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x0031000000016ced-5.dat upx behavioral1/memory/1156-560-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini 135dee814858b127643bb04096cd232a.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tabskb.dll.mui 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml.exe 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\th.pak 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Internet Explorer\images\bing.ico.exe 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jli.dll 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\1047x576black.png.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\it-IT\OmdProject.dll.mui 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\7-Zip\descript.ion 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_LOOP_BG_PAL.wmv.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwruklm.dat.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\pt-PT\tipresx.dll.mui.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Java\jdk1.7.0_80\db\LICENSE.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSEngine.dll.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Internet Explorer\D3DCompiler_47.dll.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrusalm.dat.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\System\ado\es-ES\msader15.dll.mui 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.dll 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jconsole.exe.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\7-Zip\Lang\hi.txt.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\sv-SE\tipresx.dll.mui 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\System\msadc\it-IT\msdaprsr.dll.mui.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_selectionsubpicture.png 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\InitializeAssert.htm 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\jconsole.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\720x480icongraphic.png 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationUp_SelectionSubpicture.png.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\fr.pak.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\pt-BR.pak.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\servertool.exe.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\nb-NO\tipresx.dll.mui.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_MATTE_PAL.wmv.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\IpsPlugin.dll.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-border.png 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\photoedge_videoinset.png 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\audiodepthconverter.ax 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Internet Explorer\en-US\F12.dll.mui.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\7-Zip\Lang\zh-tw.txt.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\System\Ole DB\oledb32r.dll 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\ConnectLimit.wdp.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv.exe 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\npjp2.dll 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\InputPersonalization.exe.mui.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\mshwLatin.dll.mui.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_SelectionSubpicture.png.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\7-Zip\Lang\el.txt.exe 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.exe.sig 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\javac.exe.exe 135dee814858b127643bb04096cd232a.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbynet.jar.exe 135dee814858b127643bb04096cd232a.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\bin\javac.exe 135dee814858b127643bb04096cd232a.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD52757aef176f475188d46502b8608c883
SHA13e591853a372828291a2e6c269cb615550ef20ee
SHA25690f4699d9428c37f1374a632028e669d2c0f196cfac003ab302986fcb7345931
SHA5124e3b55c31608b94b0fc456805496e994c9908ef913774d87d521dfb196232b0cfa1140cdcc4cda4a9ef7ad56aa788b66c60d756ec3b61fccf18df0c4e378d934