966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22/04/2024, 00:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
Size

101KB
MD5

30aabe8e0ef920474f5a7549713f9568
SHA1

8d19f9086881af83264669066acc90883ab37d3c
SHA256

966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1
SHA512

7507fc9ff971ae9771b8a4affb51c69e7d9fc1bc1d8731933020723be8a02e731fea58f132ed19299ac49d8e6e7aeb8d5e95bdc93f5575b17a52c738a9dba729
SSDEEP

3072:6rWpcOPxPke+e3fFpsJOfFpsJbgE2GEJdwJdB:tFPxPke+eI2G7

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3451) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.SF.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata_5.5.0.165303.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_ja.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-4.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\mobile_view.html.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\ShapeCollector.exe.mui.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Common Files\System\msadc\msadcs.dll.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\keystore\libfile_keystore_plugin.dll.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToScenesBackground.wmv.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\plugin.xml.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-openide-compat.xml_hidden.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\VERSION.txt.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-execution_zh_CN.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.DynamicData.dll.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\flavormap.properties.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Mendoza.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\java-rmi.exe.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.svg_1.1.0.v201011041433.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-settings_zh_CN.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-awt_zh_CN.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-multitabs.xml.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Media Player\es-ES\WMPDMCCore.dll.mui.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jvisualvm.exe.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Media Player\fr-FR\WMPDMCCore.dll.mui.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_zh_4.4.0.v20140623020002.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Mozilla Firefox\gmp-clearkey\0.1\manifest.json.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\Microsoft.Build.Conversion.v3.5.resources.dll.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libdxva2_plugin.dll.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\js\localizedStrings.js.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\7-Zip\Lang\mng.txt.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Rome.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter.png.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+12.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\ECLIPSE_.SF.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-tabcontrol_zh_CN.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host_ja.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Atikokan.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\es-ES\js\library.js.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\reflect.png.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Halifax.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Troll.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.feature_1.1.0.v20140827-1444\about.html.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text.nl_zh_4.4.0.v20140623020002.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup.xml.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-spi-quicksearch_ja.jar.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Caracas.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Bissau.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\js\service.js.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\UIAutomationClient.resources.dll.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\PresentationCore.resources.dll.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\play-background.png.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\et.pak.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-options.xml.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\shuffle_down.png.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\7-Zip\7-zip.chm.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Common Files\System\Ole DB\es-ES\sqlxmlx.rll.mui.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\activity16v.png.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\de-DE\css\clock.css.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\39.png.tmp	966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe

C:\Users\Admin\AppData\Local\Temp\966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe
"C:\Users\Admin\AppData\Local\Temp\966253978638a41b59dbdc655961f946e31c403fca273da1c872b4a54fdf3bb1.exe"
1⤵
- Drops file in Program Files directory
PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-1298544033-3225604241-2703760938-1000\desktop.ini.tmp

Filesize
101KB

MD5
73a547b506edc2dc05220d561933a501

SHA1
f83d208c124d0d1f6f103ec82411a64dd95a5bba

SHA256
621c52c780f440a4bfa8b658ac181d5b0ee1b6fd74d7667cf7d1f37e5fbaab3d

SHA512
99d38cfb975f54575a14ae0b36c9653fe171873dffd3846ca57e5af4b10ce113fe7035de3290a7f21c3ee81a6897ae2335fd159011c9401537a70bbd1f728fb4

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
110KB

MD5
fcdbec3b6c58674d85b4652a853c8c17

SHA1
85789953948000e5484f2d55cdd41a5a088cc306

SHA256
ca0ba763421310cb2c464a981628b4ec1b075d84b6f51a2f24bd944f4db15db5

SHA512
f3d8b59b829477083635634ebb31000632c7c5f1752786d23a0a4a08c697f476d633f30e6d08c0405169e7ad985927e5fc098c1aae0fa70b240ae09ca85c188b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads