Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
16/06/2024, 01:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe
Resource
win7-20240611-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe
-
Size
521KB
-
MD5
81443cca9d52045a92c4a2353cca3aee
-
SHA1
0e1da3b71a4acada6cbb80569fedc6c74a2cbcfa
-
SHA256
b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec
-
SHA512
5c2c40250d7b461b3b5a14584685d5f69a69f65ef53247a45acefe8881ac70371563ebea4e03d5e01a349d32a129c6bcc82173cbdd2c3a4bd169ab5db925ecc0
-
SSDEEP
12288:rrMIztyCK5x8CBmn+RrNbEyWYa0Ie1vUxjV7:FZyCA8CBmn+RrNj9ay5G7
Score
4/10
Malware Config
Signatures
-
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Windows Security\BrowserCore\BrowserCore.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\7-Zip\gUninstall.ico b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\fr-FR\msinfo32.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Google\Chrome\Application\gchrome.ico b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Java\jdk-1.8\bin\gjavah.ico b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0C0A-1000-0000000FF1CE}\misc.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fr-FR\InputPersonalization.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Smart Tag\SmartTagInstall.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0409-1000-0000000FF1CE}\gmisc.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\ShapeCollector.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\RCX549D.tmp b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\gcreatedump.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Internet Explorer\de-DE\ieinstal.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Java\jdk-1.8\bin\javac.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\gjavap.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Microsoft Office\root\Office16\CLVIEW.EXE b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Google\Chrome\Application\110.0.5481.104\gchrome.exe.ico b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Microsoft Office\root\Integration\gIntegrator.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\accicons.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\gaccicons.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\mip.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\createdump.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Java\jdk-1.8\bin\gjinfo.ico b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Microsoft Office\root\Integration\Integrator.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Java\jdk-1.8\bin\gidlj.ico b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Java\jdk-1.8\bin\gjhat.ico b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Internet Explorer\uk-UA\ieinstal.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Java\jdk-1.8\bin\gjava-rmi.ico b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Microsoft Office\root\Integration\Integrator.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\EQUATION\eqnedt32.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\de-DE\msinfo32.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\gchrome.exe.sig b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Common Files\microsoft shared\VSTO\10.0\gVSTOInstaller.ico b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome.exe.sig b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Internet Explorer\uk-UA\iexplore.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\en-US\TabTip.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File created C:\Program Files\Java\jdk-1.8\bin\extcheck.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Windows NT\Accessories\wordpad.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Internet Explorer\en-US\ieinstal.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate32.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\7-Zip\7zG.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\it-IT\InputPersonalization.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe File opened for modification C:\Program Files\Internet Explorer\it-IT\iexplore.exe.mui b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\bfsvc.exe b5bb7d9083467189312192755b2a2a99fe2222c1c4e05ee9ab575d9db5ec58ec.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
521KB
MD5add76dfa63a84c7efa88d147bd41bc86
SHA13a8e67b17c211aa32273f4d597a356aa7a90f97e
SHA2560e91c5a160cf939dd280ff5365b279b86871b77d517d5cf62ca6dfd0459d5f08
SHA5121ca2efe0e38118bdedad79f261270c1616ce4f7db33dda111401ffe9df2f39e155af268535231137d5a0a6f075e25ff1053e90394051da4e3c477d8c3a844080
-
Filesize
4KB
MD538b41d03e9dfcbbd08210c5f0b50ba71
SHA12fbfde75ce9fe8423d8e7720bf7408cedcb57a70
SHA256611f2cb2e03bd8dbcb584cd0a1c48accfba072dd3fc4e6d3144e2062553637f5
SHA512ec97556b6ff6023d9e6302ba586ef27b1b54fbf7e8ac04ff318aa4694f13ad343049210ef17b7b603963984c1340589665d67d9c65fec0f91053ff43b1401ba9
-
Filesize
4KB
MD53ea9bcbc01e1a652de5a6fc291a66d1a
SHA1aee490d53ee201879dff37503a0796c77642a792
SHA256a058bfd185fe714927e15642004866449bce425d34292a08af56d66cf03ebe6c
SHA5127c740132f026341770b6a20575786da581d8a31850d0d680978a00cc4dfca1e848ef9cdc32e51bae680ea13f6cc0d7324c38765cb4e26dcb2e423aced7da0501
-
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-001F-0C0A-1000-0000000FF1CE}\gmisc.ico
Filesize4KB
MD5fc27f73816c9f640d800cdc1c9294751
SHA1e6c3d8835d1de4e9606e5588e741cd1be27398f6
SHA2563cc5043caa157e5f9b1870527b8c323850bdae1e58d6760e4e895d2ab8a35a05
SHA5129e36b96acc97bc7cd45e67a47f1ae7ab7d3818cc2fdaad147524ce9e4baedfaac9cd012923ec65db763bfd850c65b497376bb0694508bee59747f97bf1591fd4