Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 04:05
Static task
static1
Behavioral task
behavioral1
Sample
cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe
Resource
win10v2004-20240611-en
General
-
Target
cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe
-
Size
95KB
-
MD5
fd32aba68ae43140d228a1e255289926
-
SHA1
b7104e939b5f6a0a9641d6c7c9a62b2f193c083b
-
SHA256
cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5
-
SHA512
803ea978e2f50271fb8555b56f2b2f8419db7d468c19647d227912996afce6dcf81d898b3e053930ae35b759d622a3c72dafeeabea0436613f7fe217283e20f8
-
SSDEEP
1536:W7ZrpApojOPG0PGQJwFJwkpe+eTDPfFpsJOfFpsJCAdCjHKPNMtnKs6nKs1:6rWpcOPxPke+e3fFpsJOfFpsJbgE4U9
Malware Config
Signatures
-
Renames multiple (558) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Drops file in Program Files directory 64 IoCs
Processes:
cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exedescription ioc process File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_leftarrow.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-ImageMask.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.exe.sig.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_hu.jar.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfr.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\wsdetect.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ru-RU\tipresx.dll.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPWMI.MOF.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\System\Ole DB\it-IT\msdasqlr.dll.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jmc.exe.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\dblook.bat.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\decora-sse.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\javadoc.exe.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\7-Zip\Lang\nb.txt.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\mshwLatin.dll.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipsdan.xml.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Psychedelic.jpg.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\management.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\zh-CN\tipresx.dll.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SceneButtonSubpicture.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jinfo.exe.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\16_9-frame-highlight.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\ij.bat.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\System\msadc\msadcer.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\bear_formatted_rgb6.wmv.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\System\msadc\fr-FR\msadcfr.dll.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\NavigationUp_SelectionSubpicture.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jdb.exe.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\7-Zip\Lang\io.txt.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\nl-NL\tipresx.dll.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\System\msadc\ja-JP\msadcor.dll.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Internet Explorer\ielowutil.exe.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy.jar.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\System\Ole DB\de-DE\oledb32r.dll.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationRight_SelectionSubpicture.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\libGLESv2.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ca.pak.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\bin\jps.exe.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\ipskor.xml.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\System\msadc\msadce.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DissolveNoise.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\heart_glass_Thumbnail.bmp.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_postage_Thumbnail.bmp.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\dtplugin\npdeployJava1.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\instrument.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskmenu.xml.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\MSInfo\es-ES\msinfo32.exe.mui.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\rollinghills.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_title.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\ParentMenuButtonIcon.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\passport.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\ExportPing.zip.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\tipresx.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\Common Files\System\msadc\msadcs.dll.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png.tmp cc80860ec89050bc15f5f44cc18884bebe10d6fec1ddc5cf883be979bf367ff5.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\$Recycle.Bin\S-1-5-21-39690363-730359138-1046745555-1000\desktop.ini.tmpFilesize
95KB
MD5a81c0cfb245c1222ad89aff34c44cd50
SHA16feda5ae80d094ad9fcf5d035baf15d6c24e8c11
SHA2565575856595c19359d5cc07536c7499c9d1492c25300214a457bb70507cd67fbe
SHA51279d29cfaab1d34c7d236abefb08bd6bd7068559def031f0ff9001f508b08c2dc9308ff0c6dcf90b4ad6a5e2c0a532418e0388c531bf4c22dbb0f67510b33c104
-
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmpFilesize
104KB
MD5f94f97bbf4e631c26685f8dc2a574075
SHA1bdcf5eb5d336ad27ff5a8ba11f71c3d138a93a4f
SHA2564ae67a428ef0ce99c8714018ae2edecd28fdce2617d72e5d62eab3dbd4f18c2c
SHA512f73650456ae43ac9aee1dfcf30b83d0043bb9a2cb3c147220b3b5b46d23f8bfd8fff78bf54c53e9417676024c7fa7c5b3d1b9dd4e981c0be7f4a2cacbca28600