ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735

Analysis

max time kernel
149s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09-04-2024 22:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
Size

102KB
MD5

4b85607eb8cbbe7174a6f818b6d0d6aa
SHA1

85a75df5a2ada1d719a64f4fd89e90b25c0be628
SHA256

ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735
SHA512

04970d1156ce7f6d9b42fedd1abaf189f0a0543374ca6107e72ae95c8bef0f41c52f735ac88b768c7d61e8f4b3650ec1fa7723a9f5595c68f08dca93b8e35466
SSDEEP

1536:W7ZhA7pApH1GYSiHYSilWj7ZhA7pApUBENRe:6e7WpoYvHYvIe7WpW

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3425) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonInset_Alpha1.png.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Chisinau.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding_1.4.2.v20140729-1044.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-settings.xml.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Monaco.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\7-Zip\Lang\hr.txt.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Windows Media Player\ja-JP\WMPSideShowGadget.exe.mui.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\VideoLAN\VLC\README.txt.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.components.ui_5.5.0.165303.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.operations.nl_ja_4.4.0.v20140623020002.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\FlickLearningWizard.exe.mui.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Pontianak.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_zh_4.4.0.v20140623020002.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Luxembourg.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Majuro.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\VideoLAN\VLC\lua\meta\art\01_googleimage.luac.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\VideoLAN\VLC\skins\skin.dtd.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BlackRectangle.bmp.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\fi.pak.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jrunscript.exe.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\feature.xml.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-spi-actions_ja.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jre7\lib\zi\PST8PDT.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Microsoft Games\FreeCell\ja-JP\FreeCell.exe.mui.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Windows Media Player\it-IT\wmpnscfg.exe.mui.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Microsoft Games\Hearts\Hearts.exe.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.http.jetty_3.0.200.v20131021-1843.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-views.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Core.dll.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Windows Mail\es-ES\WinMail.exe.mui.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\7-Zip\Lang\it.txt.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\THIRDPARTYLICENSEREADME-JAVAFX.txt.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Microsoft Games\Chess\ja-JP\Chess.exe.mui.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw32.bmp.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Juan.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Syowa.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_zh_CN.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\tr-TR\tipresx.dll.mui.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\1047x576black.png.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-modules-profiler-snaptracer.xml.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Santiago.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jre7\README.txt.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\desktop.ini.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libogg_plugin.dll.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Common Files\Services\verisign.bmp.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.directorywatcher_1.1.0.v20131211-1531.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jre7\lib\images\cursors\win32_CopyNoDrop32x32.gif.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\System.RunTime.Serialization.Resources.dll.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Data.Services.resources.dll.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Memories_buttonClear.png.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\sunjce_provider.jar.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+1.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkHandle.png.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jre7\bin\rmid.exe.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_gather_plugin.dll.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\7-Zip\Lang\tg.txt.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jdk1.7.0_80\COPYRIGHT.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
File created	C:\Program Files\Java\jre7\bin\jsdt.dll.tmp	ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe

C:\Users\Admin\AppData\Local\Temp\ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe
"C:\Users\Admin\AppData\Local\Temp\ba2f6c8b976e8ac69cd5785cb19a05ebb1fdbbf8c0ad3617d9cb4bff43d9e735.exe"
1⤵
- Drops file in Program Files directory
PID:3020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-1298544033-3225604241-2703760938-1000\desktop.ini.tmp

Filesize
103KB

MD5
b65ada9ecb5a00344c097e6ee1f0e169

SHA1
8e414368196036b530c46dd5c10100d2d0fda785

SHA256
ea54540f025a221e94578a16b2395acd6d52a8386f4c99186f091396e6ec5a48

SHA512
0d3a414ca4083307a348b408b5da0de3bd97b10fe2e6ffce608e55f9af37aa3d7a49ce1b7908f8899190d0446d1ac79adb58505d35ce979d593f93e95f9bd902

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
112KB

MD5
02be2871f8de43bca7d9aeb3212b52ae

SHA1
3d9274cd572d14496c079b7aab3ce6a4b96f8704

SHA256
4df1393a0d316be250744dcdca104bba2f848161e0140fcbb3fe93b0f2d48c11

SHA512
3e9a50fd7c1224b15c55f33f587146052d0e7cb01c63a70cc8fd2156f0124855f4897d9d1fca752c44b1d8da7a20a39697586a48ed3ebd4370a9de2a7f2a80cb

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads