31963fcd50ad3f44bad6c8b9436d948f638d6c640cbeaecf273917c98dc0abb8

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/03/2024, 05:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bdcfb6905f9d8ebb0446fc226c4868f8.exe
Size

192KB
MD5

bdcfb6905f9d8ebb0446fc226c4868f8
SHA1

16e9026f4492b2f66e39ea03d7979e6abf4a14e3
SHA256

31963fcd50ad3f44bad6c8b9436d948f638d6c640cbeaecf273917c98dc0abb8
SHA512

bd3b8cc1e4e7be5cc09d0a7955f9f45023ad43d17f7a6145ca62c6f126b57aae1e22361ba6548df71dffa75423721f3f6b5f64b890811f945f82ba3a72611e7a
SSDEEP

3072:BnEOei99xNKkeJIdACQCP9oWzFbvG55FEQeljikMTmAcThAkZThMTMz6X:He+fjQ2ZzFb45uixTmAcThAkZThMTMk

Score

6^/10

Malware Config

Signatures

Drops desktop.ini file(s) 6 IoCs

description	ioc	Process
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\desktop.ini	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\desktop.ini	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\$Recycle.Bin\S-1-5-21-1650401615-1019878084-3673944445-1000\desktop.ini	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\$Recycle.Bin\S-1-5-21-1650401615-1019878084-3673944445-1000\desktop.ini	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini	bdcfb6905f9d8ebb0446fc226c4868f8.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	\??\c:\Program Files\Common Files\System\ado\msadrh15.dll	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.contexts_1.3.100.v20140407-1019.jar	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\eclipse.inf	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Wrinkled_Paper.gif	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\topnav.gif	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoCanary.png	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\javafx.properties	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.runtime_3.10.0.v20140318-2214.jar	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\msdarem.dll	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\prodbig.gif	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.emf.ecore.change_2.10.0.v20140901-1043.jar	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\es-ES\TipRes.dll.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\en-US\split.avi	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\co.txt	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\MSInfo\de-DE\msinfo32.exe.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\Stationery\Genko_1.emf	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\META-INF\ECLIPSE_.SF	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novosibirsk	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui_5.5.0.165303.jar	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Internet Explorer\F12Resources.dll	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guatemala	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\ConvertFromMount.DVR	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\circleround_selectionsubpicture.png	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.core\cache\artifacts.xml	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Google\Chrome\Application\106.0.5249.119\libGLESv2.dll	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\es-ES\msadcer.dll.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\javafx-mx.jar	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_ja_4.4.0.v20140623020002.jar	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\osppobjs-spp-plugin-manifest-signed.xrm-ms	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\System\de-DE\wab32res.dll.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cancun	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Sofia	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\bg-BG\tipresx.dll.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr.jar	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Baghdad	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jakarta	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\7-Zip\Lang\ms.txt	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\it-IT\FlickLearningWizard.exe.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\DVD Maker\DVDMaker.exe	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File created	\??\c:\Program Files\Common Files\Microsoft Shared\ink\ipsnld.xml	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.jasper.glassfish_2.2.2.v201205150955.jar	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\bin\jvisualvm.exe	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Vilnius	bdcfb6905f9d8ebb0446fc226c4868f8.exe
File opened for modification	\??\c:\Program Files\Common Files\System\msadc\en-US\msdaprsr.dll.mui	bdcfb6905f9d8ebb0446fc226c4868f8.exe

C:\Users\Admin\AppData\Local\Temp\bdcfb6905f9d8ebb0446fc226c4868f8.exe
"C:\Users\Admin\AppData\Local\Temp\bdcfb6905f9d8ebb0446fc226c4868f8.exe"
1⤵
- Drops desktop.ini file(s)
- Drops file in Program Files directory
PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\osetup.dll

Filesize
5.7MB

MD5
3ac2bf926254522fcc7f140b72a3bcb1

SHA1
8fb33529f7bcc6c115605872bb01bb7bbcfc343e

SHA256
6b21e41dacff4c6ea8a0d1d0e9588197fae07fcb4c29aec02234608099b88d1f

SHA512
f113f9232375b9e297535ab357c554b4b203f9f73a1d192ffa8ccbc766e40c9961a3c0dc69877f080ad65501ff94b2ce0f94a176b84a3d2b73c71bf3d67d797a

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\jvm.lib

Filesize
5B

MD5
b5b682b742431a52ea8b17c72ad9c572

SHA1
326320f469235708c59f678c9a7357dca552d306

SHA256
30d9045a9f172208b13161d1f5204e5787e5e07bfbb4f490d0041b03b7f44f76

SHA512
4e1bd7cc616b3115baf6be7ebd29fe2d1123bc0f25464865a0cf9207b0344fba70747a5ce6f00e8d9c696881f6db1e12f81736bc748b6f2b60bf84c681a49163

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\epl-v10.html

Filesize
12KB

MD5
386b6087dd9575fc6b8ada0f7a463723

SHA1
5373d4ffd89438a60b8ae0858c3bc4e8d37f540a

SHA256
ef494685ac9644ba5672cfc49c6efe5e09a2d71706d5cf4b57171f7d5f7a70d1

SHA512
1d39dd2dd736431ebe0e7f16a9f10b748e522cfee03a187ad020708e48ed676a21eef6b3ac3b1f600cff2e19f1d30ca25f682fe773650b3fc97e20f0afd8557b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html

Filesize
8KB

MD5
8ed35e04c7556933d923ee706f8312d7

SHA1
15b0c7aae539b756640e9d28e6f68d82bd5b9294

SHA256
f2f8e2280b4118ce0ecbf0c58b73fba5e9666f8cdb53fabe8a1fb6fbcd48e2c7

SHA512
3f37e8d86d9495f5a5ba4639c2b178d8c3ce0236d4578638630fc901fd4c6d0d40fd3e57e0e28ad9e049295425864a14bf32d1368769e19e749226c5ff84e84b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf

Filesize
62B

MD5
f6dbc4b34179e10f9b6c0e2d5d24c2c6

SHA1
1c53d71700022886c41b568a9514924fd3c1c62b

SHA256
05df06e24037881941804db6ca15f7a25dd10a536b0f642e7a3d09de07256206

SHA512
25a2bc555f2e49610a0490377bf687188f7e13931cbd8e29482584e552b65a2e51fe84fa5153825517a011d7b65df831911c302ae482b23fa0b118524e8af24b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\META-INF\ECLIPSE_.RSA

Filesize
7KB

MD5
6a922ae3979f4cd80d73e62711c19826

SHA1
4cc0a5bf46db54e1c54059394fb9f64b95d4ef69

SHA256
9cd780aa41ad06ec2e7f40837e69fa0c02a8f069e51ca8c8622b5e43ab84fb61

SHA512
a285f8c0b5deb7a22bfe98c31c1bb44ad2cec3c512b0b0a018c6a8ca51718c6cbd5f805236dcf1c6d6e2b8a8f91d521b1653c055c9d71f67c4de5579047040f3

Download Submit
memory/1368-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1368-494-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1368-1430-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads