3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e

Analysis

max time kernel
150s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
03/07/2024, 05:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
Size

84KB
MD5

ba5604f85b71ed1c90d94fc7553030e0
SHA1

af6f7d4b366bcdcd1a3ebf90a9d60875ae76fd68
SHA256

3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e
SHA512

f848ee2e862b77e19f80e9de83ae7fc4a68c38d866f55759c046e6db0b79c4edd2984df7335a503a7fcb134d18c9dc6a746a36f692d7b839cb24ddbc497eb0cd
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhH:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsi

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3726) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Net.Resources.dll.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\fr-FR\css\flyout.css.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\grid_(inch).wmf.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msadcer.dll.mui.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaTypewriterBold.ttf.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\about.html.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.preferences_3.5.200.v20140224-1527.jar.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\16.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\VideoLAN\VLC\locale\eo\LC_MESSAGES\vlc.mo.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Media Player\ja-JP\wmpnscfg.exe.mui.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_right_disabled.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Common Files\System\ado\msado28.tlb.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Hovd.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Minsk.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.ui.zh_CN_5.5.0.165303.jar.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Fortaleza.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous_partly-cloudy.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Tanspecks.jpg.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\DebugMerge.vdx.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-charts_zh_CN.jar.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Mexico_City.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Warsaw.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\docked_black_moon-new_partly-cloudy.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AdobeCollabSync.exe.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\7-Zip\readme.txt.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-text.xml.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-api.xml.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-ui_ja.jar.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\css\flyout.css.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\29.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Common Files\System\msadc\de-DE\msdaprsr.dll.mui.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_mainImage-mask.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Fortaleza.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_zh_CN.jar.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsScenesBackground_PAL.wmv.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Barbados.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Entity.Design.dll.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.databinding.observable.nl_ja_4.4.0.v20140623020002.jar.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-charts.jar.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_zh_CN.jar.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-7.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Mozilla Firefox\AccessibleHandler.dll.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\it-IT\js\currency.js.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\css\slideShow.css.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\7-Zip\7zFM.exe.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\web.xml.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\feature.xml.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-javahelp.xml.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jre7\lib\zi\Antarctica\DumontDUrville.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\16_9-frame-background.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Chagos.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jre7\lib\zi\Antarctica\Mawson.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Gambier.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Entity.Resources.dll.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudiobargraph_a_plugin.dll.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libwall_plugin.dll.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\epl-v10.html.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler_1.2.0.v20140422-1847.jar.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPBlue.png.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\config\Modules\org-netbeans-lib-profiler-ui.xml.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\UIAutomationProvider.resources.dll.tmp	3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe

C:\Users\Admin\AppData\Local\Temp\3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe
"C:\Users\Admin\AppData\Local\Temp\3cfe3d49876cdd67dbda821bac7e352eaa7a3131b687d6b96214bea7b9e2e61e.exe"
1⤵
- Drops file in Program Files directory
PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2737914667-933161113-3798636211-1000\desktop.ini.tmp

Filesize
84KB

MD5
31a0cf49e81dbceead6ed463b96d8b8a

SHA1
e40a8ccadf129888abbdd4c010d505319e76df24

SHA256
11752294c202ed5f63478e9062ee636bb4cdbc8c44a0b988a64b4ce8391a5af9

SHA512
ecbf24805cd7c0e58ef9fb35bef744f43eacffd5994a18f42cfa0649d169754796fe20943f599d4f757b42fd9341d843f75dffd263610b7f7c637cbdfd9ab79d

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
93KB

MD5
87c82973edb92473baadc1b0fd2c1373

SHA1
b62722da7574b187667c74f86466a308fff5fc97

SHA256
5e3f71a727c111dec0d5ad6729eab4e0e89402deb36bc22edc8d8cd9bb8568f7

SHA512
71d760db10a3357d4dd7a7dc425367e871f2964ad1c449d2a2f3543041bfc5ae765d3d03e96d5dedde9c9de21e488d05d4e0cfc35cccd9e9d36e7020e4db8490

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads