Analysis

  • max time kernel
    150s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26-04-2024 06:16

General

  • Target

    7fe5b0c10871ea040abbc7b9e4c9a08d.exe

  • Size

    210KB

  • MD5

    7fe5b0c10871ea040abbc7b9e4c9a08d

  • SHA1

    ddec3c4c3ebe22e9c992b205c0b0c3467e6b6e69

  • SHA256

    20de06845645ed178865b8c32d1a0f5eda090836cd0a2933ed58d74dd6297df2

  • SHA512

    6cc7afc9f6315c238059aab3ed1556832ad2f761f7c2d30adcce9a344c5e4696847838bc447b6097cdfd3b2a7beb3d82ebef0e70ee928aa0f76aca0d3bc98e9f

  • SSDEEP

    6144:RqlIyFESWu0SWu2shFAC2jnkbOupvuv+qM/qMV:tyosbpankbfcvK

Score
9/10

Malware Config

Signatures

  • Renames multiple (335) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7fe5b0c10871ea040abbc7b9e4c9a08d.exe
    "C:\Users\Admin\AppData\Local\Temp\7fe5b0c10871ea040abbc7b9e4c9a08d.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-330940541-141609230-1670313778-1000\desktop.ini.tmp

    Filesize

    210KB

    MD5

    9a69cb71b45e069d12fe4ef267d8bcbf

    SHA1

    23eaabb347d82a5e23235c87330b4651acd38e19

    SHA256

    6581a938fb3074f92cb605c24835ea37234381990fb8159575ac2b3faf9d115d

    SHA512

    df18b2551493f63e63c94f8df8639ccaca617a97e3e0cd896db60c51781d34930e34e5533b854120ba7d9a62c32d37397e733b7b4d771a1ca3e72d3d03bed21c

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    219KB

    MD5

    bbc66d0dc0cd34c617bb480127a130bf

    SHA1

    25d81d12836446fa32e6fe8eff145415eb89a16c

    SHA256

    6e4b21a75179ff46020524542392ae7f817762f9ebe2818b3b4a3fd0cd3a2224

    SHA512

    a8f87cb4b3effaaf1cf757cd17b7dac57e5c7126c826300b55385499f59549cd503a1de42350dd4a38c2c0a513c3aa5ebba1ee80af78d13d8f00c2a9ac87bdf0