Analysis
-
max time kernel
150s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
10-06-2024 23:31
Static task
static1
Behavioral task
behavioral1
Sample
7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe
Resource
win10v2004-20240426-en
General
-
Target
7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe
-
Size
99KB
-
MD5
b1d6dc3a60c0d843c9be05264407d3c5
-
SHA1
fb34e5ea303620dad146d35babe692ff2f98875d
-
SHA256
7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813
-
SHA512
8897da3514d1a8543e4e9f017e2ce99c571ce7e1304aa0776068efa8e53595b677abe4aacde9ef235c91067bd07d822677cabbaccdf232ebde33bf8242e7ea4e
-
SSDEEP
1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPYX:6rWpcOPxPke+e3fFpsJOfFpsJbgES
Malware Config
Signatures
-
Renames multiple (3444) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-highlight.png.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nome.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgaussianblur_plugin.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Media Player\en-US\wmpnetwk.exe.mui.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\AccessBridgeCalls.h.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64.nl_zh_4.4.0.v20140623020002.jar.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-progress_ja.jar.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\WindowsBase.resources.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-back-static.png.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.nl_zh_4.4.0.v20140623020002.jar.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jre7\bin\jp2launcher.exe.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jre7\lib\zi\SystemV\PST8.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\it-IT\css\currency.css.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\1.png.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)alertIcon.png.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\ja-JP\css\weather.css.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576black.png.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\TipRes.dll.mui.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jpeg.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jre7\lib\zi\America\Cayenne.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libsepia_plugin.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Defender\it-IT\MpEvMsg.dll.mui.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Journal\fr-FR\JNTFiltr.dll.mui.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\it-IT\js\settings.js.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwruksh.dat.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\buttonUp_Off.png.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.xml_1.3.4.v201005080400.jar.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\VideoLAN\VLC\plugins\demux\libasf_plugin.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\js\init.js.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST5EDT.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_ja.jar.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\es-ES\gadget.xml.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainBackground.wmv.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jre7\lib\zi\Antarctica\Mawson.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\VideoLAN\VLC\plugins\keystore\libmemory_keystore_plugin.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Media Player\Media Renderer\DMR_120.jpg.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\7-Zip\Lang\sw.txt.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-modules.xml.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jre7\bin\unpack200.exe.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jre7\lib\zi\Asia\Pontianak.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.io_8.1.14.v20131031.jar.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jre7\lib\zi\Etc\GMT+6.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\chkrzm.exe.mui.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Journal\fr-FR\Journal.exe.mui.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\jce.jar.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Defender\MpRTP.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jre7\lib\deploy\messages_zh_TW.properties.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\uk.pak.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\VERSION.txt.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-ui.jar.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.IO.Log.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\VideoLAN\VLC\locale\bn_IN\LC_MESSAGES\vlc.mo.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_filter\libpostproc_plugin.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\1px.gif.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\tipresx.dll.mui.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Thimphu.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\JAWTAccessBridge-64.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationLeft_ButtonGraphic.png.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxwebkit.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\Maputo.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_10_p010_plugin.dll.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent_partly-cloudy.png.tmp 7508f15d6df21966effb3201d7b378b71a4c3b1e4bd3bee082e0977fb876e813.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
99KB
MD5080cb5ed761810f083ea71e0cb020bfd
SHA13eda532fe1c4b4ad7d24abd66691c58bb79e7ab9
SHA256d491668e0eddd22ed2b12469a9538d5da73b1698f65292655c50cce529b63276
SHA51288d8063442a3f3b75c2a5e3ed71b0a7404cb775f3f5e67014b54a6e87b03d21d9ddb5e42f3473e9cd526ebc4f84f9f19b58ce868f9c1cb85be1d3e474f04d821
-
Filesize
108KB
MD5806338074419fdaa1462863cdfb904c9
SHA1e54aabcbf0477deb2adff5626c3330aeed1fe516
SHA2562859d55fb8a7e2b628c2e096fd6692dd1f4bc95cff42ec1a9136369863e5530a
SHA512498f9aa3e27572e503ccfdf7e72ae0f24eeb5a9feaccd8d77df1bf5f613ca5bccceea497197d9da120b4e6b02c7275ef17316afe874f076b24dea833aad17739