5328debc003a62b279989c8e17661953309506efc2b66332b50416020461ecd1

Analysis

max time kernel
120s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 06:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

614837455c5c491dc9aa30c177eb5600N.exe
Size

66KB
MD5

614837455c5c491dc9aa30c177eb5600
SHA1

2b7f80d599b4da2417aa76a5fabb5a103660b1b8
SHA256

5328debc003a62b279989c8e17661953309506efc2b66332b50416020461ecd1
SHA512

269b67564c9ce2f6053789aaf2c41cf9f6261ffe64b181fec7ef411c6c0233351fe5e94eda95776e81a550c669dce6853256d960a72b4bd9946d2ad96678b80b
SSDEEP

768:W7BlpppARFbhbt7Y7WBp9/Bp9H8RN8zQRN8zqJdkCKPuJdkCKPF:W7ZppApRhH8RMQRMqJdkCKPuJdkCKPF

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3271) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Rarotonga.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Sao_Paulo.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.zh_CN_5.5.0.165303.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.simpleconfigurator.manipulator_2.0.0.v20131217-1203.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-swing-outline.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Common Files\System\de-DE\wab32res.dll.mui.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rankin_Inlet.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\ECLIPSE_.RSA.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Kiev.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\join.avi.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_btn-next-static.png.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Paris.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Microsoft Games\Hearts\desktop.ini.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Microsoft Games\Solitaire\desktop.ini.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Tucuman.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec64.dll.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Microsoft Games\Chess\de-DE\Chess.exe.mui.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.conf.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\SoftBlue.jpg.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop_PAL.wmv.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jvisualvm.exe.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\bin\decora-sse.dll.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\splash.gif.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Whitehorse.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-sampler.xml.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\bin\rmid.exe.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libinteger_mixer_plugin.dll.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui.ja_5.5.0.165303.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.engine.nl_zh_4.4.0.v20140623020002.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-core-ui.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.ja_5.5.0.165303.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_VideoInset.png.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.historicaldata_5.5.0.165303.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Toronto.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Bougainville.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\classlist.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\7-Zip\7z.sfx.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ro-RO\tipresx.dll.mui.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Common Files\System\ado\msado20.tlb.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.css.sac_1.3.1.v200903091627.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-editor-mimelookup.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Microsoft Games\Chess\ChessMCE.lnk.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Microsoft Games\Purble Place\desktop.ini.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\PresentationFramework.resources.dll.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\mip.exe.mui.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-uisupport.xml.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\lib\ext\sunmscapi.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Glace_Bay.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\New_York.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\7-Zip\Lang\tk.txt.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\nacl_irt_x86_64.nexe.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-core-ui.xml.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-nodes_zh_CN.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Center.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_pt_BR.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Cairo.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Bucharest.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Ulaanbaatar.tmp	614837455c5c491dc9aa30c177eb5600N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.ja_5.5.0.165303.jar.tmp	614837455c5c491dc9aa30c177eb5600N.exe

C:\Users\Admin\AppData\Local\Temp\614837455c5c491dc9aa30c177eb5600N.exe
"C:\Users\Admin\AppData\Local\Temp\614837455c5c491dc9aa30c177eb5600N.exe"
1⤵
- Drops file in Program Files directory
PID:344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2660163958-4080398480-1122754539-1000\desktop.ini.tmp

Filesize
67KB

MD5
00729a51c7b58c66e2829816b05b2ac0

SHA1
2edfb005a2c75450511825b5c822adbb176d6de7

SHA256
27a933fe356971e1adf3f06ac0b81f0f702c88f5a92cf5209b44f1e4a6629378

SHA512
e8c1a97f4ccb8296e940ac4f4d9c384b6dbdae35101d8e69b31c2ee406ea4f011e475c98a7a3ee0aef2390e655e3b977813da05ad398a15bef009d0abaf0687f

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
75KB

MD5
b687d2e7875aa1a024ae5b98ed88acda

SHA1
88f18e226b5657e24d4716e64b0d993d01281f94

SHA256
c72c8b277c72aba7d940cb6220d1e00905499db18512891c7d374322b4fb9814

SHA512
39cd65bf9fe9c78e64df2ff078a4751ea44eb2081e4590be8ae6cd4e134742b23e0f230f19af0f6b47e1f1ed7c60871c6a64262cedd1a673e11073f011de7a44

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads