Analysis

  • max time kernel
    150s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 20:05

General

  • Target

    334696f4436d4a2b8b775d5124290c5644f69e887ec46dfa33a66045781a0be5.exe

  • Size

    74KB

  • MD5

    0eed5b80265922206fc6d59b38e98a52

  • SHA1

    a6dc6d4781d7d3eaf1fb77f0214c0df52f681d4a

  • SHA256

    334696f4436d4a2b8b775d5124290c5644f69e887ec46dfa33a66045781a0be5

  • SHA512

    a8713944d75e436db438a7811cc345c5a736d27a50700ca8e1fbcde9e90e5ec4b94ae682d0450c190105c4300623ac10adc5669280df78e67d208954daf95978

  • SSDEEP

    1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7tw0A0c+Y:6e7WpP9oVLQthbYY9oVLQthbUrt7tw0C

Score
9/10

Malware Config

Signatures

  • Renames multiple (3443) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\334696f4436d4a2b8b775d5124290c5644f69e887ec46dfa33a66045781a0be5.exe
    "C:\Users\Admin\AppData\Local\Temp\334696f4436d4a2b8b775d5124290c5644f69e887ec46dfa33a66045781a0be5.exe"
    1⤵
    • Drops file in Program Files directory
    PID:1992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\$Recycle.Bin\S-1-5-21-2721934792-624042501-2768869379-1000\desktop.ini.tmp

          Filesize

          75KB

          MD5

          d5613b24525c49c5ff803bb335221440

          SHA1

          108a08938ce5cbb0b08b850c9658896ffbb09fc4

          SHA256

          be4738aa9d1938f3924335fb03d4af7ee443c76556a5adf168d04871e8c47a01

          SHA512

          85935607b0058752d0c820e02c3518e6e6a07e7dde240f457ae03b2ae920267aa41ec6b8c9a91457a2552eb09e23f1032bc5555b300d350d71b241668fc6b793

        • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

          Filesize

          83KB

          MD5

          6d4ed146a79bf64cdadd3b87b581ea4f

          SHA1

          cfa42c7e8177ac478a8653497c86af4276607171

          SHA256

          ff303aa2301da566e9d186758811dc054b8671b1a4e73bd0cb115b61da01432f

          SHA512

          13428f159f6b0579a83eec2abcb6fa73f8c54d9d4b7df2327b4c58caf977e67d9b69648d39701b5713b494298546abad04aae0b58728830459f85f8e2b111959