Analysis
-
max time kernel
151s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/03/2024, 20:44
Behavioral task
behavioral1
Sample
c9941445d2b53a46211e286d89afbf44.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c9941445d2b53a46211e286d89afbf44.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
4 signatures
150 seconds
General
-
Target
c9941445d2b53a46211e286d89afbf44.exe
-
Size
1.8MB
-
MD5
c9941445d2b53a46211e286d89afbf44
-
SHA1
da82e1068d7edeb6f680920141856add766e1932
-
SHA256
fc4a4b77f9c250cf1e8c166b032d09facb4848fc0f68665c4e23c4defa4d776b
-
SHA512
1e64ca7d8e12fe2543e81e7ad678a30c3e38728031edba71818b052208d7cd90adcd2c29f8d199e2a7f56fee3ae5734e3e468ec61319eb204e7a3c631cea31f7
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7NxqUkH6:SCqm2Jpr0nNM7Dus7Nx2a
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/2960-0-0x0000000000400000-0x00000000005BA000-memory.dmp upx behavioral1/files/0x0032000000012265-5.dat upx behavioral1/memory/2960-397-0x0000000000400000-0x00000000005BA000-memory.dmp upx -
Drops desktop.ini file(s) 1 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini c9941445d2b53a46211e286d89afbf44.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf c9941445d2b53a46211e286d89afbf44.exe File opened for modification C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\System\it-IT\wab32res.dll.mui c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_ButtonGraphic.png c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\LogoDev.png.exe c9941445d2b53a46211e286d89afbf44.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\Welcome.html c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\babypink.png c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\it-IT\OmdProject.dll.mui.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\stopNetworkServer.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\win32_CopyNoDrop32x32.gif.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\mshwLatin.dll c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\EnableUnregister.mp3.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Google\Chrome\Application\chrome.VisualElementsManifest.xml.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-border.png c9941445d2b53a46211e286d89afbf44.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\id.pak c9941445d2b53a46211e286d89afbf44.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ru.jar c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\wsdetect.dll.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\7-Zip\Lang\sv.txt.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\TipRes.dll.mui.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\micaut.dll.mui.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\JdbcOdbc.dll.exe c9941445d2b53a46211e286d89afbf44.exe File opened for modification C:\Program Files\7-Zip\Lang\fur.txt c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\shadowonlyframe_videoinset.png c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Internet Explorer\en-US\networkinspection.dll.mui.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipssrl.xml.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\DVDMaker.exe.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\it-IT\DVDMaker.exe.mui c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\Welcome.html.exe c9941445d2b53a46211e286d89afbf44.exe File opened for modification C:\Program Files\7-Zip\Lang\tg.txt c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\7-Zip\Lang\vi.txt.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.jpg.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\System\msadc\de-DE\msaddsr.dll.mui c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Internet Explorer\iexplore.exe.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pt_BR.jar.exe c9941445d2b53a46211e286d89afbf44.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages.properties c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\System\msadc\msdfmap.dll c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\System\wab32res.dll.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationLeft_ButtonGraphic.png c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\sunmscapi.dll.exe c9941445d2b53a46211e286d89afbf44.exe File opened for modification C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy.jar c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\System\ado\msader15.dll c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\System\msadc\ja-JP\msadcor.dll.mui.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\System\msadc\msadcf.dll.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\dotsdarkoverlay.png.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\sonicsptransform.ax.exe c9941445d2b53a46211e286d89afbf44.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll.sig c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\nacl_irt_x86_64.nexe.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\7-Zip\Lang\cs.txt.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\System\ado\msadox.dll c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\DVD Maker\de-DE\WMM2CLIP.dll.mui c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\bg.pak.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jsadebugd.exe.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\7-Zip\7z.dll.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jcmd.exe.exe c9941445d2b53a46211e286d89afbf44.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsdeu.xml.exe c9941445d2b53a46211e286d89afbf44.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
MD58bc4e80313efec3173383be7253212d4
SHA1390ceb920eea735ac90fc1195e8586dce3d04cf5
SHA256b3dcdf105c78350b03eb0b60fb4f5812f00faa9b3642a71b0dbf758f8558b731
SHA512258e307c4159dbba6ec03e4cc5b2fbef3b95b9c9f1dc425dff875145cd579afa1f64082dff9982fb09cc152e1b9883270199c3d47dd1dbdfba3b1d9bccb4ad05