bf061629a03ca9c89c090a7cb1ba714427dd7473ba45edc5013748aac3a6ffb1

Analysis

max time kernel
120s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19-07-2024 12:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

97c229f655aca954d6875e145f1a2fb0N.exe
Size

33KB
MD5

97c229f655aca954d6875e145f1a2fb0
SHA1

bc51dbb8e87ce216ab26628c470bcb2b6ec3a6bd
SHA256

bf061629a03ca9c89c090a7cb1ba714427dd7473ba45edc5013748aac3a6ffb1
SHA512

cfa7fc760fbf8b7496eb348426c40cdd6bc5545e47eb95c49fe969387eb5a709cf1861c5b52af70d36280f1382c8793b58908dc3874140a12a70c2110bb8ff1a
SSDEEP

384:GBt7Br5xjL9AgA71FbhvuNBNhcj7jApSdpSE:W7BlpppARFbhOpup5

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3460) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\cs.pak.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\YST9.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.zh_CN_5.5.0.165303.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_zh_4.4.0.v20140623020002.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-actions.xml.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libkate_plugin.dll.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Trans_Notes_PAL.wmv.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-attach_ja.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Samara.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Vienna.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\jawt.lib.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.properties.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench.nl_ja_4.4.0.v20140623020002.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_zh_4.4.0.v20140623020002.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\logger\libfile_logger_plugin.dll.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\NextMenuButtonIcon.png.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Windows Media Player\fr-FR\WMPDMCCore.dll.mui.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkClientCP.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ext_5.5.0.165303.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Pine_Lumber.jpg.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jps.exe.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jstack.exe.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Norfolk.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\feature.xml.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-attach_zh_CN.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jre7\LICENSE.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_mp4_plugin.dll.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ta.pak.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_pt_BR.properties.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\en-US\bckgRes.dll.mui.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\ja-JP\ChkrRes.dll.mui.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\es\System.Management.Instrumentation.Resources.dll.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\VideoLAN\VLC\THANKS.txt.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ru.pak.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Windows Media Player\Media Renderer\DMR_120.png.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\DVD Maker\de-DE\WMM2CLIP.dll.mui.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Bermuda.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\7-Zip\Lang\ja.txt.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Pyongyang.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jre7\lib\cmm\CIEXYZ.pf.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\AST4ADT.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Microsoft Games\Purble Place\ja-JP\PurblePlace.exe.mui.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Notes_content-background.png.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novokuznetsk.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_ja_4.4.0.v20140623020002.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libtcp_plugin.dll.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_fr.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\jvm.dll.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Common Files\System\en-US\wab32res.dll.mui.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.updatechecker.nl_zh_4.4.0.v20140623020002.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.base_4.0.200.v20141007-2301.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-editor-mimelookup-impl_zh_CN.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-explorer_ja.jar.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jre7\lib\deploy\messages_it.properties.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\vlc.mo.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Common Files\System\msadc\handler.reg.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Wake.tmp	97c229f655aca954d6875e145f1a2fb0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\eclipse.inf.tmp	97c229f655aca954d6875e145f1a2fb0N.exe

C:\Users\Admin\AppData\Local\Temp\97c229f655aca954d6875e145f1a2fb0N.exe
"C:\Users\Admin\AppData\Local\Temp\97c229f655aca954d6875e145f1a2fb0N.exe"
1⤵
- Drops file in Program Files directory
PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2660163958-4080398480-1122754539-1000\desktop.ini.tmp

Filesize
34KB

MD5
ae91c7b029fd2d7b64cec472371985ea

SHA1
d4c8be65b2eb91b8cf02aa38333f0b75144cb4de

SHA256
bf6bb65fe2debcb61df980237c1e5c95e6dc53a31459000fd8d42e7c2f7ba7e1

SHA512
4ff4bc2ad9ae090f0966e0bb97e4ea1b68f8037024b75cefb8b98892b639dbfd64fcf290902fc8d035761250d72dfa1d216c6a4b913f9b587eac1343110694c4

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
43KB

MD5
654b68ff0b6061ccbf6054a7be596154

SHA1
5653e2fcff5b8cf393d1c92647f98ba91175bc1f

SHA256
b86bb416833e81241fa1edccba5929e055a3dfaf9c48a3deff7b6951fdf9cf2f

SHA512
0419eca2ff859ddbbc5168a910895baa66b559d51f976f1b5b64fd6d57a96142615112d833d6fb056667ba06fb5a2af6f860dea595586cb659b8b62c113f542b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads