5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
05/06/2024, 23:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
Size

73KB
MD5

02c95b20a1f40d9a538b516a23388e74
SHA1

bc2304f45b5f0095cde8d2cc1395cb77fa0c6e12
SHA256

5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf
SHA512

fd9f0f316124269a869e29f468b3863b9653fd0a5421177bd41153c8283dfa599c935ce126e37d313ad1253f19edfdc1c8776a20af1c29098a49c864edb6b6b3
SSDEEP

1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eJG/x/HfFpsJOfFpsJp:6e7WpMaxeb0CYJ97lEYNR73e+eKZHfFg

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3466) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\VideoLAN\VLC\skins\skin.catalog.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\es-ES\css\settings.css.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\greenStateIcon.png.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsnor.xml.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\ij.bat.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hovd.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+5.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-api.xml.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Bogota.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Warsaw.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\PST8.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\redmenu.png.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Internet Explorer\SIGNUP\install.ins.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Full.png.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\css\picturePuzzle.css.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\es-ES\gadget.xml.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\css\slideShow.css.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jre7\lib\zi\Atlantic\Madeira.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Media Player\de-DE\wmplayer.exe.mui.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Photo Viewer\en-US\PhotoAcq.dll.mui.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libnormvol_plugin.dll.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Journal\ja-JP\NBMapTIP.dll.mui.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Media Player\de-DE\WMPSideShowGadget.exe.mui.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\gadget.xml.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\ja-JP\js\picturePuzzle.js.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Curacao.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-output2_ja.jar.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Data.Entity.Resources.dll.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\DVD Maker\de-DE\DVDMaker.exe.mui.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-modules-profiler-selector-api.jar.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Casey.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-windows.xml.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Sydney.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.ja_5.5.0.165303.jar.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup-impl.xml.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libmad_plugin.dll.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOInstaller.config.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Common Files\System\msadc\msadcs.dll.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Azores.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\it-IT\css\localizedSettings.css.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Common Files\System\Ole DB\it-IT\sqloledb.rll.mui.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+4.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Guam.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.artifact.repository.nl_ja_4.4.0.v20140623020002.jar.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_classic_win7.css.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh89.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Mozilla Firefox\Accessible.tlb.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_SelectionSubpicture.png.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Samara.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Photo Viewer\it-IT\PhotoViewer.dll.mui.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\es-ES\js\settings.js.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\settings.html.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Funafuti.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Barbados.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Microsoft Games\Chess\Chess.dll.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.ServiceModel.Resources.dll.tmp	5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe

C:\Users\Admin\AppData\Local\Temp\5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe
"C:\Users\Admin\AppData\Local\Temp\5ce48503ab5666f05a409d4e2a874d9bbdac4e469220a7388644a3e724400ebf.exe"
1⤵
- Drops file in Program Files directory
PID:1304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2248906074-2862704502-246302768-1000\desktop.ini.tmp

Filesize
74KB

MD5
15e5c7163a28594ae8f1ad6cdb768913

SHA1
c899efa81d4e49f57094073d23c5d2e4728d22da

SHA256
b8f3f288f966fee8aef1e09dde04192cc0e1bdbe0a294b60ff295ab1a9099a3d

SHA512
ac914d48fc2b4adc06823b4c08c378782a84886d969afd9e1fa1c75247c223a32126452e757a8aeb3d6da58162a719e921340cd4831d309c5f2aad1c199cfd9b

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
82KB

MD5
2a349f60ef64280df91234ab423881c4

SHA1
6a55aaa68efd6b9682e282e11cb64433b47406e2

SHA256
783d34990078ad71ad11dc99464f45f84a4416f38c16cf840c9f135d55618d69

SHA512
e10db6376b69d4cf727d3d905e7fb960aed67e0e6f216e09e6490b4673d3243b2169d32ce7aa813c4e09732d1881234a7484921b0ae068131f5a306368cc1a2d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads