Analysis
-
max time kernel
150s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 06:16
Static task
static1
Behavioral task
behavioral1
Sample
7fe5b0c10871ea040abbc7b9e4c9a08d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7fe5b0c10871ea040abbc7b9e4c9a08d.exe
Resource
win10v2004-20240412-en
General
-
Target
7fe5b0c10871ea040abbc7b9e4c9a08d.exe
-
Size
210KB
-
MD5
7fe5b0c10871ea040abbc7b9e4c9a08d
-
SHA1
ddec3c4c3ebe22e9c992b205c0b0c3467e6b6e69
-
SHA256
20de06845645ed178865b8c32d1a0f5eda090836cd0a2933ed58d74dd6297df2
-
SHA512
6cc7afc9f6315c238059aab3ed1556832ad2f761f7c2d30adcce9a344c5e4696847838bc447b6097cdfd3b2a7beb3d82ebef0e70ee928aa0f76aca0d3bc98e9f
-
SSDEEP
6144:RqlIyFESWu0SWu2shFAC2jnkbOupvuv+qM/qMV:tyosbpankbfcvK
Malware Config
Signatures
-
Renames multiple (335) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
Processes:
7fe5b0c10871ea040abbc7b9e4c9a08d.exedescription ioc process File created C:\Program Files\7-Zip\Lang\tr.txt.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrdeush.dat.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Pretty_Peacock.jpg.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DebugEdit.wav.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\sports_disc_mask.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\content-background.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogo.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\System\Ole DB\oledbjvs.inc.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyScenesBackground.wmv.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\fil.pak.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_SelectionSubpicture.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\FlickLearningWizard.exe.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\micaut.dll.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\InputPersonalization.exe.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Google\Chrome\Application\master_preferences.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\7-Zip\Lang\vi.txt.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkObj.dll.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\mshwjpnr.dll.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\System\ado\msado15.dll.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-previous-static.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-over-select.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\ShapeCollector.exe.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\7-Zip\7z.dll.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\7-Zip\Lang\mng.txt.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoCanary.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\7-Zip\Lang\it.txt.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground_PAL.wmv.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_widescreen_Thumbnail.bmp.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Orange Circles.htm.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\it-IT\WMM2CLIP.dll.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\Common.fxh.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\blackbars80.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_SelectionSubpicture.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sw.pak.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\7-Zip\Lang\ja.txt.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\7-Zip\Lang\yo.txt.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\fr-FR\OmdProject.dll.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\blackbars60.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\720x480icongraphic.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\vi.pak.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\mip.exe.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.jpg.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\Logo.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\7-Zip\7z.sfx.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\lv-LV\tipresx.dll.mui.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationRight_SelectionSubpicture.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\specialmainsubpicture.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Internet Explorer\en-US\eula.rtf.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\7-Zip\Lang\kab.txt.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\te.pak.tmp 7fe5b0c10871ea040abbc7b9e4c9a08d.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
210KB
MD59a69cb71b45e069d12fe4ef267d8bcbf
SHA123eaabb347d82a5e23235c87330b4651acd38e19
SHA2566581a938fb3074f92cb605c24835ea37234381990fb8159575ac2b3faf9d115d
SHA512df18b2551493f63e63c94f8df8639ccaca617a97e3e0cd896db60c51781d34930e34e5533b854120ba7d9a62c32d37397e733b7b4d771a1ca3e72d3d03bed21c
-
Filesize
219KB
MD5bbc66d0dc0cd34c617bb480127a130bf
SHA125d81d12836446fa32e6fe8eff145415eb89a16c
SHA2566e4b21a75179ff46020524542392ae7f817762f9ebe2818b3b4a3fd0cd3a2224
SHA512a8f87cb4b3effaaf1cf757cd17b7dac57e5c7126c826300b55385499f59549cd503a1de42350dd4a38c2c0a513c3aa5ebba1ee80af78d13d8f00c2a9ac87bdf0