Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 04:10 UTC

General

  • Target

    3f06964b4c1cc6a163135618fe2b3510.exe

  • Size

    52KB

  • MD5

    3f06964b4c1cc6a163135618fe2b3510

  • SHA1

    4534c6a8acca3d98a655b7b31c83f0581c737756

  • SHA256

    d81f27a43b773757fc9677b41a2aec43efbcb10deb185c2190443249efa077a3

  • SHA512

    e413b5e8322d55542c650943f8a9bce9daa1500b8bf0b124371e9f058648e93e9527e8aaf10bbdda89cb2fc084738ac5625807b0ae334bf6e4b00331816e112a

  • SSDEEP

    768:W7BlpppARFbhHFoqAJwBqAJw70EXBwzEXBwg:W7ZppAp0

Score
9/10

Malware Config

Signatures

  • Renames multiple (3453) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3f06964b4c1cc6a163135618fe2b3510.exe
    "C:\Users\Admin\AppData\Local\Temp\3f06964b4c1cc6a163135618fe2b3510.exe"
    1⤵
    • Drops file in Program Files directory
    PID:2116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-2737914667-933161113-3798636211-1000\desktop.ini.tmp

    Filesize

    52KB

    MD5

    f522fc36f346c0828531dd3a68b85148

    SHA1

    9c540798402e384f8c71c0917334322025d4a9bb

    SHA256

    43bf8e0c5cce47ca445625b05ebf644108befe3af284fb4719fdf1ffbdab1596

    SHA512

    5b76f5d94300ff72b5a765607e4affe2ce2073beaffbc0632f6470a01a57e17b54ce385e977f4954e9172e8b5b8b0cd102cd62318f001e3dd5a647414811c324

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    61KB

    MD5

    37a048ff511e832c6ce20091a3cf0b02

    SHA1

    b420ae693af86e0638708bed2c0f971356c2fefe

    SHA256

    a0c6fce41415519fd60d59f6aa70b63f3b5bf94635eaf7b4f8ae5b2423e8bf18

    SHA512

    f6604cd7a391aa97aa40658789454f653b7df6a21cc239f24f115ebf3580124119009e0d5056ad97b7f7c7ef18efd5212500bd70d71fe9aa7901c36cd3ecf040

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.