d98075411dacca9b45a1b347e8d60486b31db1fc3c4038b0fa48b22a07c07b27

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 00:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2f0046d9ab98d920762d1e43b235a720N.exe
Size

87KB
MD5

2f0046d9ab98d920762d1e43b235a720
SHA1

10126d2427e094bb91fa39bd642e167ff643202f
SHA256

d98075411dacca9b45a1b347e8d60486b31db1fc3c4038b0fa48b22a07c07b27
SHA512

e4d9720c968621ac0dd6dc5a0fa1d719526ec72f824535012d6b22f4b13225fdc96043bcf108eaf3f47237aa3b10da7d7016e908eb7d54deb4b599d10860fca1
SSDEEP

1536:W7ZppApUFpEhLfyBtPf50FWkFpPDze/qFsxEhLfyBtPf50FWkFpPDze/qFsAcEhg:6pWpUFpEhLfyBtPf50FWkFpPDze/qFsV

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3141) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-multitabs_ja.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-previous-static.png.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\eclipse.inf.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-loaders_ja.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationRight_ButtonGraphic.png.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-5.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Bogota.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-api-progress.xml.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-output2.xml_hidden.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Mozilla Firefox\firefox.VisualElementsManifest.xml.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\720x480blacksquare.png.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-favorites.xml.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist.xml.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Tbilisi.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Nauru.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.configuration_5.5.0.165303.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.nl_zh_4.4.0.v20140623020002.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Mozilla Firefox\browser\features\[email protected]	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\msvcr100.dll.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\management-agent.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\ja-JP\bckgzm.exe.mui.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Microsoft Games\SpiderSolitaire\ja-JP\SpiderSolitaire.exe.mui.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jstatd.exe.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_ja_4.4.0.v20140623020002.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\license.html.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\ReachFramework.resources.dll.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\CST6CDT.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\javaw.exe.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\psfont.properties.ja.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Tarawa.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\MSTTSCommon.dll.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\PreviousMenuButtonIcon.png.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.zh_CN_5.5.0.165303.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-1.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationRight_ButtonGraphic.png.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\feature.properties.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_ja.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Prague.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\org.eclipse.equinox.p2.metadata.repository.prefs.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application_zh_CN.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Common Files\System\ado\msado15.dll.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\wsgen.exe.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\toc.xml.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net_1.2.200.v20140124-2013.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Kuala_Lumpur.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Rectangles\NavigationRight_ButtonGraphic.png.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jmc.ini.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base.nl_zh_4.4.0.v20140623020002.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-multitabs.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\es-ES\ShvlRes.dll.mui.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Canary.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.di.nl_ja_4.4.0.v20140623020002.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.felix.gogo.shell_0.10.0.v201212101605.jar.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\de-DE\bckgRes.dll.mui.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Inuvik.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs-nio2.xml.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Glace_Bay.tmp	2f0046d9ab98d920762d1e43b235a720N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\license.html.tmp	2f0046d9ab98d920762d1e43b235a720N.exe

C:\Users\Admin\AppData\Local\Temp\2f0046d9ab98d920762d1e43b235a720N.exe
"C:\Users\Admin\AppData\Local\Temp\2f0046d9ab98d920762d1e43b235a720N.exe"
1⤵
- Drops file in Program Files directory
PID:644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3502430532-24693940-2469786940-1000\desktop.ini.tmp

Filesize
87KB

MD5
d564351f82b2e7320cd4b17830569fec

SHA1
9be445ff3e294dbf2729c706837357b0bf47c386

SHA256
58a6c7fdaeb01d56e9c38a1f84ed2613568d2cc6eb4f6c927807aab0abf34ac1

SHA512
d880e413fb2f00c57adc36b9bce043bcbe1be17cda898e20b2cf61fb693698018bf59b7f96373bdd6659d9c303a6af810e044da3c830a6186337baac22921fac

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
96KB

MD5
ad6da6e96c08856e600e0e8a6afb7c4d

SHA1
9f0f0795e6db01e3aff1a38e705bb1ee2068aa0f

SHA256
a8866a045938b51c0a2f4bb939ece0793ae11d966fc5d2f6518484b85af559cb

SHA512
30aecd443762697f8d8062c4101a20c537b2b98b48ed25475237128f6aea3d79228c4d74030bc3a52716bf4def1ecdae4e06e4de67776a4c636a66dc71dbb153

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads