Analysis
-
max time kernel
153s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/02/2024, 16:46
Behavioral task
behavioral1
Sample
ac5d84bc3021bd56bbe577478b261e5e.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ac5d84bc3021bd56bbe577478b261e5e.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
ac5d84bc3021bd56bbe577478b261e5e.exe
-
Size
1.8MB
-
MD5
ac5d84bc3021bd56bbe577478b261e5e
-
SHA1
f7b975663748298941dd4f256c4d71c634eb2636
-
SHA256
58a8d37cfe286f1bc11872adb90a6b049e7d37c57c6f987175f8542090e9fa4b
-
SHA512
cb0533e3f17d79aadd12d05fe362bc423716895d948286b39ccf4088af275aa9edc618257aee859362b844506c079f803739ffbbd12195203fc5ab774414977d
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxq9:SCqm2Jpr0nNM7Dus7Nxs
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2148-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x0037000000014b82-5.dat upx behavioral1/memory/2148-377-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini ac5d84bc3021bd56bbe577478b261e5e.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Music.emf ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\System\ado\adojavas.inc ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-overlay.png ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\CircleSubpicture.png.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoDev.png.exe ac5d84bc3021bd56bbe577478b261e5e.exe File opened for modification C:\Program Files\7-Zip\Lang\en.ttt ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\7-Zip\Lang\sa.txt.exe ac5d84bc3021bd56bbe577478b261e5e.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoCanary.png ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\IPSEventLogMsg.dll.mui.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Scene_loop_PAL.wmv.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\rtscom.dll.mui.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\System\Ole DB\de-DE\sqlxmlx.rll.mui ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\System\msadc\msdaremr.dll.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png.exe ac5d84bc3021bd56bbe577478b261e5e.exe File opened for modification C:\Program Files\7-Zip\Lang\sk.txt ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\es-ES\msinfo32.exe.mui ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationRight_SelectionSubpicture.png.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIconSubpict.png ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationLeft_SelectionSubpicture.png ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipTsf.dll.mui ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipTsf.dll.mui.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitevignette1047.png.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\WMM2CLIP.dll.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png ac5d84bc3021bd56bbe577478b261e5e.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\fa.pak ac5d84bc3021bd56bbe577478b261e5e.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_200_percent.pak ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\micaut.dll.mui ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\System\msadc\msadds.dll ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_SelectionSubpicture.png.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers\numbase.xml ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\System\ado\adovbs.inc ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\7-Zip\Lang\eo.txt.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\en-US\MSTTSLoc.dll.mui.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask.wmv.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader_icd.json.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\ConfirmClear.xps.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipTsf.dll.mui.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png.exe ac5d84bc3021bd56bbe577478b261e5e.exe File opened for modification C:\Program Files\7-Zip\Lang\gu.txt ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Roses.jpg ac5d84bc3021bd56bbe577478b261e5e.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\he.pak ac5d84bc3021bd56bbe577478b261e5e.exe File opened for modification C:\Program Files\7-Zip\Lang\kab.txt ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\de.pak.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.dll.sig.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_wer.dll.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwresmlm.dat.exe ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Title_Page_Ref.wmv ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\Internet Explorer\IEShims.dll ac5d84bc3021bd56bbe577478b261e5e.exe File created C:\Program Files\7-Zip\Lang\az.txt.exe ac5d84bc3021bd56bbe577478b261e5e.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD543e6e8ab6936253a136d2eba0b02d2ca
SHA10fd10e9ad2f07e622116e1d01f11b8c42a06d627
SHA2564eb2252fa8ef1f425cc802e6c1cf74644900ea4b43fe8fcaafa06e899ee14e14
SHA512f3494e3dde2e4637b89bd990525ab3bef5b4323ce12b7e0c9678810c88be7585f7e4d10664593520bf309f5713f10441bca128ea873eaa6891635dd199548ae2