f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1

Analysis

max time kernel
149s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12/06/2024, 06:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
Size

91KB
MD5

6749cc37fd79f99b7a7bfd17abf14a15
SHA1

e104a46c8cedb2e0d5d3bbf9fc4fbbc7cfae7586
SHA256

f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1
SHA512

1032830b2ffbd4972be4e952223b9eee54cf1d3e71f8e19f1860d543f1bcf4ecdccaabca49238a50c065a51fdc92a25e80f50c3ab9190e14ce938ca3f78a6220
SSDEEP

1536:W7ZhA7pApMaxB4b0CYJ97lEVqNR7Yge+eJG/x/0VXaqvD:6e7WpMaxeb0CYJ97lEYNR73e+eKZ0VXH

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3432) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup.jar.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-modules-appui.xml.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\St_Johns.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP.bat.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\include\jvmti.h.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Paramaribo.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\es-ES\clock.html.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\kinit.exe.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kolkata.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Majuro.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\Workflow.Targets.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\fr-FR\js\settings.js.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\it-IT\js\weather.js.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\7.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\TipRes.dll.mui.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\default.jfc.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Gibraltar.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libsapi_plugin.dll.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\sidebar.exe.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Filters\odffilt.dll.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-5.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\VideoLAN\VLC\lua\playlist\cue.luac.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\logo.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\MEIPreload\preloaded_data.pb.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\tzmappings.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\YST9YDT.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\VideoLAN\VLC\lua\meta\art\03_lastfm.luac.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_preferencestyle.css.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\UIAutomationClientsideProviders.resources.dll.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\26.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\41.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Vostok.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+8.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata_2.2.0.v20131211-1531.jar.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Mozilla Firefox\nss3.dll.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\8.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Google\Chrome\Application\chrome.exe.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbynet.jar.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-awt_ja.jar.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jre7\bin\jli.dll.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\resources.pak.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\en-US\ShvlRes.dll.mui.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Media Player\es-ES\wmpnssci.dll.mui.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\de-DE\settings.html.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Media Player\es-ES\wmplayer.exe.mui.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\DVD Maker\ja-JP\OmdProject.dll.mui.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.properties.src.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Sitka.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libwebvtt_plugin.dll.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Windows.Presentation.resources.dll.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\16.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrusash.dat.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\Louisville.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_left_mousedown.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\logo.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\vlc.mo.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\tpcps.dll.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Common Files\System\ado\ja-JP\msader15.dll.mui.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.views.nl_zh_4.4.0.v20140623020002.jar.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-util-enumerations_zh_CN.jar.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\icon.png.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msadcfr.dll.mui.tmp	f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe

C:\Users\Admin\AppData\Local\Temp\f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe
"C:\Users\Admin\AppData\Local\Temp\f6e11a932fc5670b29ce252b5f73402f806d811dae989f9d96f46b78aae0bab1.exe"
1⤵
- Drops file in Program Files directory
PID:3020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-1298544033-3225604241-2703760938-1000\desktop.ini.tmp

Filesize
91KB

MD5
b99a3063f2d414ba8f0a3ce561cbb3a1

SHA1
8dbe59adb2491af2949347fba9e54270969eef8b

SHA256
00cd8984d6b47f8e95723e1391f2d07b37da2f4973dca0fa765ca51532fe4693

SHA512
42636f9923a35e3f70de0593b50b22328ce12953458b0fd9b0c0de4c25db240e4468321d181ebf8c9d520a2eee9f6078813437fa544bb620bd5664d373f8ef6b

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
100KB

MD5
0f31e1e3dae204395aeba15b10eb432c

SHA1
3bf982a8d35565016a815cad522db30b3ca9e92a

SHA256
41c8dae3fe5e80dd99f4e0ba4f22d29fdc79ace9299979617f59063da6ebbe9b

SHA512
88abe721bf2b39bd1bd014dcc8048f70238e5240cb10285104e10661c9fc9eacd2d224e76713f9b272b514c32736da0a8e2f88d9b712e86ccc220a652a834f76

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads