Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 11:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
86d26e7a0a9831b1a03731d4e6c6738c.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
86d26e7a0a9831b1a03731d4e6c6738c.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
86d26e7a0a9831b1a03731d4e6c6738c.exe
-
Size
117KB
-
MD5
86d26e7a0a9831b1a03731d4e6c6738c
-
SHA1
30e64147e601a80eb9433ffa8e9e0904b252a7cb
-
SHA256
fc7f75fe80f80e220ae37c23db6d3a25644ad8286c354a916f56e3f08a365989
-
SHA512
08fcdd8e9c3527016cc1d2f592c660b1fe0610616fe87f75fdbd38fe9a48bfdd162795408cce6441255d6becd7306b2e882025edf605bfbd6cc75dba34b4854d
-
SSDEEP
768:/7BlpQpARFbh2UM/zX1vqX1v+1WbW1rjrA9ZONZOD5ZTXB85c5Y:/7ZQpApUsKiX26O
Score
9/10
Malware Config
Signatures
-
Renames multiple (3450) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsfra.xml.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\To_Do_List.emf.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.ibm.icu_52.1.0.v201404241930.jar.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Mozilla Firefox\browser\features\[email protected] 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Windows Journal\it-IT\Journal.exe.mui.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Windows Journal\Templates\Genko_2.jtp.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Common Files\System\ado\msadox.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.nl_ja_4.4.0.v20140623020002.jar.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libh26x_plugin.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cambridge_Bay.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Kerguelen.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jre7\bin\zip.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Xml.Linq.Resources.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libinflate_plugin.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_100_percent.pak.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jre7\bin\server\Xusage.txt.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Qyzylorda.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jre7\lib\zi\Indian\Christmas.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-image-inset.png.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jdb.exe.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterRegular.ttf.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-io-ui.jar.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Monterrey.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color120.jpg.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Microsoft Games\Solitaire\SolitaireMCE.lnk.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\TipRes.dll.mui.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPC.DLL.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerConstraints.exsd.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.runtime_0.10.0.v201209301036.jar.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Adak.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jre7\lib\jfxrt.jar.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.ja_5.5.0.165303.jar.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Windows Media Player\en-US\WMPSideShowGadget.exe.mui.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\mshwjpn.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSLoc.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerEvaluators.exsd.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Recife.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novokuznetsk.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\VideoLAN\VLC\plugins\codec\libx265_plugin.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-heapdump.xml.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jre7\lib\zi\America\Indiana\Marengo.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Prague.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Common Files\System\ado\msado28.tlb.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-application.xml.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\de.pak.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.jasper.glassfish_2.2.2.v201205150955.jar.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-nodes.xml.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.Speech.resources.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\7-Zip\Lang\ro.txt.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\dt_shmem.dll.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-templates.xml_hidden.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.war.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\about.html.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-lib-uihandler.xml.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\Mozilla Firefox\browser\features\[email protected] 86d26e7a0a9831b1a03731d4e6c6738c.exe File created C:\Program Files\7-Zip\Lang\ast.txt.tmp 86d26e7a0a9831b1a03731d4e6c6738c.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
117KB
MD59159fedcbc0751634244cee3b859667e
SHA1e758e441c2be84b3ce18a7d82fed83febad853a0
SHA25627535a8dc9c1e0309ce818942a9db29061bde4544b44333a3fdaa29e004d825d
SHA512f3cd34a67991bbdadfca99112e27253eda5b9d3e3244dfdbd0e5192d375b704fa172566fdce7ab41fe8235f83d93275a1cf664a9ec3c00973969c6c0de3bf2c3
-
Filesize
126KB
MD5f8a6d7a04c456a7f42874d9f42f97fde
SHA133e6546dcb6e3265cd63388addfe7d5340ad16f5
SHA256d677afec42279554d03be022c22e85ac5e223dd972a4b4757dce56498d7ac92c
SHA5126eeb3e422ef05558a32feaee6088a14b73c1d6aac327401a6263c4b4389ef565c1aa8140c15d215795fce66be80cb517b38cc0006bfa9a747f93357285b53235