7cb8b67a6f7fe6f6a0e4e80b251ff7cfe428f5adf684f51973018f02f7600ceb

Analysis

max time kernel
120s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 11:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cb4e231103689872cac22f8eb96589e0N.exe
Size

62KB
MD5

cb4e231103689872cac22f8eb96589e0
SHA1

089dc104037afce5b59f5c566f5303742c2aa8dc
SHA256

7cb8b67a6f7fe6f6a0e4e80b251ff7cfe428f5adf684f51973018f02f7600ceb
SHA512

2138c1db6ecd18ca76fde9b72506e02a84e6d3135541ce8c7bfada482abc4656b6250a6229d315dd6256b06163dafee287c8048abe39f29d5c1a48e24364cfb5
SSDEEP

768:W7Blp9pARFbhQSox/6Sox/ME4JAIAepE4JAIAeuDlmlQPc3f6Pc3f5TGotuMOiJH:W7Z9pApQESOHepOHe8G+6E65TGA3

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (2995) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\accessibility.properties.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\management-agent.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-convert-l1-1-0.dll.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Mozilla Firefox\crashreporter.ini.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.update\platform.xml.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Kentucky\Louisville.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\System.Windows.Presentation.resources.dll.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\DVD Maker\en-US\OmdProject.dll.mui.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\cs.pak.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Riyadh87.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Urumqi.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-masterfs-nio2_zh_CN.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Kaliningrad.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_CN.properties.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\feature.properties.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Common Files\System\ado\fr-FR\msader15.dll.mui.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Common Files\System\wab32.dll.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\el.pak.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Chatham.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\notification_plugin.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System.Data.Entity.Resources.dll.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Costa_Rica.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ulaanbaatar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\pt-BR\tipresx.dll.mui.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Eirunepe.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\EST5EDT.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_ja_4.4.0.v20140623020002.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Data.Entity.Resources.dll.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\UpdateConvertFrom.scf.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\7-Zip\Lang\sq.txt.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\MSInfo\de-DE\msinfo32.exe.mui.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask.wmv.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-execution.xml.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\mai\LC_MESSAGES\vlc.mo.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\vlc.mo.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\date-span-16.png.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jre7\lib\javafx.properties.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Mozilla Firefox\mozglue.dll.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdaps.dll.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_ButtonGraphic.png.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-tools_ja.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\es-ES\SpiderSolitaire.exe.mui.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-progress-ui.xml.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-api-caching_ja.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Mozilla Firefox\dependentlibs.list.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-api-visual_ja.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Green Bubbles.htm.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Internet Explorer\perf_nt.dll.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_zh_4.4.0.v20140623020002.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Noronha.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler_ja.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\Microsoft.Build.Engine.resources.dll.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\7-Zip\Lang\zh-cn.txt.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\base_altgr.xml.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Common Files\System\Ole DB\it-IT\oledb32r.dll.mui.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\DVD Maker\rtstreamsource.ax.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\btn-back-static.png.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_ja_4.4.0.v20140623020002.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\1047x576_91n92.png.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-search.jar.tmp	cb4e231103689872cac22f8eb96589e0N.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_diagonals-thick_18_b81900_40x40.png.tmp	cb4e231103689872cac22f8eb96589e0N.exe

C:\Users\Admin\AppData\Local\Temp\cb4e231103689872cac22f8eb96589e0N.exe
"C:\Users\Admin\AppData\Local\Temp\cb4e231103689872cac22f8eb96589e0N.exe"
1⤵
- Drops file in Program Files directory
PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-1506706701-1246725540-2219210854-1000\desktop.ini.tmp

Filesize
63KB

MD5
12773fe3573cad4335888f31c1d26efc

SHA1
2258453bc84e20dd6f56a1c316785f72259c6786

SHA256
6351d69508d3b26d212258f640ed0e341c9764ae4e507ac2c07e300e0b15302b

SHA512
a94386ae8545535f84ad048c808f600f70533cdabb2c65b44db196fe03b0596eb93ed66403070c2399a34c54a4dfa8b7b540b81a71ae8821750c3f417f3cd17e

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
72KB

MD5
1b56fc9896ee61186d398af4184e4530

SHA1
661ace21127e911fee93d47df396263711fb0e4e

SHA256
07ff135a24a08b356ac2fb3ed8939cc065a41518930381425e6db2a718b52f20

SHA512
32aab0255d05f543120ae7ade0741b5942fd37800ef1c35554355faa23a0bdf6519bb23cc2b8caa801b383b15faa46054f1c686af0c5258783625138e6cd3a4e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads