Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10-06-2024 23:40
Static task
static1
Behavioral task
behavioral1
Sample
792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe
Resource
win10v2004-20240508-en
General
-
Target
792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe
-
Size
52KB
-
MD5
51ade945a69636520a054628c0ee756b
-
SHA1
c20c7fac7c7cff6756b50d603c10825e55e65090
-
SHA256
792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc
-
SHA512
3bbb79a3518bcfdfbeb01769feec4dac99c771b7c5452c792b01dc14528e50bed419c8d711bd24356db1a511d2aba8a5ffa53a24e0b267ae258c846ebbef6d90
-
SSDEEP
384:GBt7Br5xjL9AgA71FbhvuNBNsjLKoWFKryoWFKrxxbNgbNbEL+4Uk8EL+4UkW:W7BlpppARFbhWJQi6L+hkrL+hkW
Malware Config
Signatures
-
Renames multiple (3882) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Java\jdk1.7.0_80\bin\jinfo.exe.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\META-INF\ECLIPSE_.RSA.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\VideoLAN\VLC\locale\mr\LC_MESSAGES\vlc.mo.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\VideoLAN\VLC\plugins\misc\libvod_rtsp_plugin.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\VBAJET32.DLL.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Microsoft Games\Multiplayer\Checkers\Chkr.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_h264_plugin.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Cuiaba.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Merida.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Beirut.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\7-Zip\Lang\tr.txt.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationLeft_SelectionSubpicture.png.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Microsoft Games\Hearts\fr-FR\Hearts.exe.mui.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\de-DE\settings.html.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\es-ES\js\init.js.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.widgets.nl_zh_4.4.0.v20140623020002.jar.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\timer_up.png.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\7-Zip\Lang\ba.txt.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\InkWatson.exe.mui.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Wake.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\UIAutomationProvider.resources.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Extensions.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\fr-FR\js\localizedStrings.js.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-execution.jar.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CST6CDT.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\VideoLAN\VLC\locale\ku_IQ\LC_MESSAGES\vlc.mo.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationLeft_SelectionSubpicture.png.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\PresentationCore.resources.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Web.Entity.Design.Resources.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Windows Media Player\Network Sharing\wmpnss_color32.jpg.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\NPSWF32.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_zh_CN.jar.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jvm.xml.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_ja.jar.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.svg_1.1.0.v201011041433.jar.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Nipigon.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-javahelp.xml.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jre7\lib\zi\America\Montreal.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Linq.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Common Files\System\Ole DB\oledb32.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ql.nl_ja_4.4.0.v20140623020002.jar.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Xml.Linq.Resources.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\Cordoba.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Mozilla Firefox\default-browser-agent.exe.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.io_8.1.14.v20131031.jar.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\VideoLAN\VLC\plugins\misc\libaddonsvorepository_plugin.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_corner_top_left.png.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Malta.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\es-ES\slideShow.html.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\VideoLAN\VLC\lua\http\images\Other-48.png.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\undocked_black_moon-new.png.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-sampler_ja.jar.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\drag.png.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-core_zh_CN.jar.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\Cairo.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Java\jre7\lib\cmm\PYCC.pf.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\ReachFramework.resources.dll.tmp 792362f9e46ffefc634d9d64a07559e59cfe9405987cc07153b694e5c0b74dfc.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
53KB
MD52bddfcaad77b1ebf293256e9e543adfc
SHA15fd6ae25ba9fe8003d792b3908277ec286c78764
SHA2566f6f6172abcc5e1656dece19375bbd2f838e0ba63bcf0173929d286d227d18c1
SHA5125fa7434a9965e41a8f621c7de79e22a14628b971dba3e86208f0ffb6c49e5236ca1e68cda77503589dd629ca10f4d3e9a6190e411b2af12335a462ad5e2b7585
-
Filesize
61KB
MD5a4b25259d465388b82c3dc9b793a3f97
SHA15056b45971e0576bc1100a46a81f40b27857e642
SHA25677cc32fc2e7f8bf91eb744377c396b6aed474a0b7dd6752d31290180f741b13d
SHA512d60d12b5287874e1a342732772bc5207c8e4e405c96704063d5a3f4a971a57fe971a621022e23dacabbf57cda56ff3da68297ea836f15dfdea2d8a629f244da2