b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0

Analysis

max time kernel
150s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-05-2024 01:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
Size

117KB
MD5

faae18cb0e3c00fc760842eb6a3d16a6
SHA1

038eecc687c2b739221ee8752d896295ffcb65ec
SHA256

b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0
SHA512

3b9bc7f00becbd0dd2168ee1fcf4dbd2910dad246e178832bfd81fb9750cd492b8259d3df929e24fd3b1dacf78eef0b5bf8b7050724d4bbc0727290e0609405f
SSDEEP

3072:6e7WpHIyRF9ESWu0SWuDmhSauvEKxVTLJtxoVz8FUDrYYaCusjdEKxVTLJtxoVzz:RqlIyFESWu0SWuGSn

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3451) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\GrantAssert.vst.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_ja_4.4.0.v20140623020002.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Blue_Gradient.jpg.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\license.html.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface_3.10.1.v20140813-1009.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libkate_plugin.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\System\msadc\ja-JP\msadcfr.dll.mui.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Mendoza.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Microsoft Games\FreeCell\it-IT\FreeCell.exe.mui.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.IO.Log.Resources.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\System\msadc\en-US\msaddsr.dll.mui.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\splash.gif.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Lord_Howe.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.exe.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-profiling.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\InkObj.dll.mui.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Csi.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Merida.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Volgograd.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\mobile_browse.html.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrcatsh.dat.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-image-mask.png.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Internet Explorer\SIGNUP\install.ins.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-progress-ui.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\mip.exe.mui.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-charts.xml.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_output\libdirectsound_plugin.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\gtkTSFrame.png.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-explorer.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jre7\bin\npt.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\startNetworkServer.bat.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+3.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jre7\lib\images\cursors\win32_LinkDrop32x32.gif.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Sakhalin.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Easter.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_Buttongraphic.png.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Microsoft Games\FreeCell\ja-JP\FreeCell.exe.mui.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.servlet_8.1.14.v20131031.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Internet Explorer\ielowutil.exe.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\San_Juan.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_copy_plugin.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push.png.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Santa_Isabel.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_dummy_plugin.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Peacock.htm.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.core_0.10.100.v20140424-2042.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\plugin.properties.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\Microsoft.Build.Engine.resources.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Web.Entity.Design.Resources.dll.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Windows Journal\Templates\Graph.jtp.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Windows Media Player\it-IT\WMPMediaSharing.dll.mui.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Windows NT\Accessories\es-ES\wordpad.exe.mui.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.exe.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Guyana.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_zh_CN.jar.tmp	b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe

C:\Users\Admin\AppData\Local\Temp\b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe
"C:\Users\Admin\AppData\Local\Temp\b38158ccc0a58455f1d973177d01cb4cffbce300f2d0eb9f8710082832ad40a0.exe"
1⤵
- Drops file in Program Files directory
PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3452737119-3959686427-228443150-1000\desktop.ini.tmp

Filesize
117KB

MD5
2637ab0ffdcbaa0763623c3af93dfcd1

SHA1
b64aa3182a8e0c113259262086c879644948fc58

SHA256
c1fd25190692b35fcdf4d2485ff7cb3fa5fe0d38bbb48e75f15a5048cb074e04

SHA512
a87b18ce2ae2989ac6eeb0676cb890b4869da524ffab449476303b617a321a580e8dd4b3009818fd1f65cb416a99bc78e3938b4b89e3f9fa5cf0eb0f519408b4

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
126KB

MD5
7d8671088e883ec2d315019f715764ad

SHA1
33926d231d64869adfdd58360fd6971aa1d38907

SHA256
ecaf4a9dc936e5f634d32fa88cf0a24e8197576317fc4716d0aa250a80acd57b

SHA512
c992613d5986cf972c15111c9260da0d86e9677f5a95e2c81c753b96501404c84085fb4dfa0b7684b279985091e69b1bf528bf92417ea186367984149eca3835

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads