32eeebdb2763ab36ccf44d7e5e3acb6ebd30396ecfcf15e036a843f6ef731650

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 02:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

57bc334ff95f5bf8717965b8015056fe.exe
Size

1.8MB
MD5

57bc334ff95f5bf8717965b8015056fe
SHA1

f57dfc9987fa3f815abe0c39d6ada3329bc72afc
SHA256

32eeebdb2763ab36ccf44d7e5e3acb6ebd30396ecfcf15e036a843f6ef731650
SHA512

870d893749962dfed24794e70bdfc42aae585b91a25204c63fd84e9ecd83b9740b37f34e4e2f52edaf957995b0aa11f93fb727c56e6fdfe680d4d029bce0be73
SSDEEP

24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqD:SCqm2Jpr0nNM7Dus7NxK

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/2360-0-0x0000000000400000-0x00000000005BA000-memory.dmp	upx
behavioral1/files/0x000900000001560b-5.dat	upx
behavioral1/memory/2360-3103-0x0000000000400000-0x00000000005BA000-memory.dmp	upx
behavioral1/memory/2360-9202-0x0000000000400000-0x00000000005BA000-memory.dmp	upx

Drops desktop.ini file(s) 9 IoCs

description	ioc	Process
File created	C:\Program Files\desktop.ini	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Microsoft Games\Mahjong\desktop.ini	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Microsoft Games\Solitaire\desktop.ini	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Microsoft Games\Chess\desktop.ini	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Microsoft Games\FreeCell\desktop.ini	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Microsoft Games\Hearts\desktop.ini	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Microsoft Games\Purble Place\desktop.ini	57bc334ff95f5bf8717965b8015056fe.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jmap.exe.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Bahia.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\optimization_guide_internal.dll.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-11	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\PresentationFramework.resources.dll	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\control\libdummy_plugin.dll	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\accessibility.properties	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-common.jar	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Vienna.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libskiptags_plugin.dll.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color48.png.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Media Player\wmpconfig.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Common Files\System\msadc\msadcor.dll.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Media Player\wmpnscfg.exe.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\GroupFormat.m3u	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_ja.jar.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Microsoft Games\Mahjong\es-ES\Mahjong.exe.mui	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\images\Other-48.png.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\ja-JP\picturePuzzle.html.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationLeft_ButtonGraphic.png.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\VideoLAN\VLC\locale\tet\LC_MESSAGES\vlc.mo.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libmft_plugin.dll.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Sidebar\sbdrop.dll.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\ClearStart.mov.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\javafx-doclet.jar	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\epl-v10.html	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.xml.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jre7\bin\jp2iexp.dll	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\7-Zip\Lang\io.txt.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\TipBand.dll.mui.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\java.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\asl-v20.txt	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Mozilla Firefox\msvcp140.dll	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\ja-JP\css\currency.css	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\TipTsf.dll.mui	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Media Player\wmpenc.exe.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground_PAL.wmv.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_standard_plugin.dll.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-host-views.xml	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_gray_rainy.png	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Internet Explorer\pdmproxy100.dll.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-swing-outline.xml.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunec.dll	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\es-ES\js\settings.js.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_dot.png	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page_PAL.wmv	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libimage_plugin.dll	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libantiflicker_plugin.dll	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\34.png.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Internet Explorer\Timeline.dll.exe	57bc334ff95f5bf8717965b8015056fe.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-favorites.jar.exe	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-masterfs.xml	57bc334ff95f5bf8717965b8015056fe.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar	57bc334ff95f5bf8717965b8015056fe.exe

C:\Users\Admin\AppData\Local\Temp\57bc334ff95f5bf8717965b8015056fe.exe
"C:\Users\Admin\AppData\Local\Temp\57bc334ff95f5bf8717965b8015056fe.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\7-Zip\7-zip32.dll.exe

Filesize
1.8MB

MD5
15b98196d1728786152d5e302bc05d16

SHA1
35a633d645467b88ef89aa9c947dc25082e7aa14

SHA256
4dccaa1f08c3536c30aaa3f1cbf77366ef5567d5505c938a015ee90cc5c5d160

SHA512
08ce9768c869abdca9cd94679359cb1b8b6fe16bc319e539d8f18d317eb1bb34b066a907c6c2ad57d1cf345de66a5482d4d75828dc0f9ae1babecbdad86ef893

Download Submit
memory/2360-0-0x0000000000400000-0x00000000005BA000-memory.dmp

Filesize
1.7MB

Download
memory/2360-3103-0x0000000000400000-0x00000000005BA000-memory.dmp

Filesize
1.7MB

Download
memory/2360-9202-0x0000000000400000-0x00000000005BA000-memory.dmp

Filesize
1.7MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads