e018cf04dc9c3dce44d9b4e9692eeb8aaeb9fd5998e2281e9e9e4868175e0e77

Analysis

max time kernel
120s
max time network
119s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 13:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9cc4c3fc90bb2838aabc217212b4d1b0N.exe
Size

91KB
MD5

9cc4c3fc90bb2838aabc217212b4d1b0
SHA1

02ac5c5c324708b1c7297f471c580f6e2d96f014
SHA256

e018cf04dc9c3dce44d9b4e9692eeb8aaeb9fd5998e2281e9e9e4868175e0e77
SHA512

2151f0acf80625877c9b746a15d68a1ad07737adcc664ec86e1ce6bed98a5d59b30a2778d12666aa6e578007e1a2b0b4b094594a92452c7ed63ca16e2b28afd9
SSDEEP

1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7tw0A0F:6e7WpP9oVLQthbYY9oVLQthbUrt7tw0Z

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (2938) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\AST4.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_travel_Thumbnail.bmp.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler.xml.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_partstyle.css.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-keyring-fallback_zh_CN.jar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Bahia_Banderas.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Mozilla Firefox\nssckbi.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ShapeCollector.exe.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\TravelIntroToMainMask.wmv.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Internet Explorer\F12Resources.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyrun.jar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\hprof.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\InkObj.dll.mui.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\InkWatson.exe.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Gibraltar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.Speech.resources.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\NavigationUp_SelectionSubpicture.png.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-impl.xml.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\rmiregistry.exe.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\e4_default_mru_on_win7.css.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.clusters.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_ja.jar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Microsoft Games\More Games\es-ES\MoreGames.dll.mui.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\7-Zip\Lang\fi.txt.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\mshwjpnr.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\it\Microsoft.Build.Conversion.v3.5.resources.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.rcp.feature_1.2.0.v20140523-0116\META-INF\MANIFEST.MF.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_zh_CN.jar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\7-Zip\Lang\es.txt.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\currency.data.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jre7\bin\fxplugins.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Belize.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\zip.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Choibalsan.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-print_zh_CN.jar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Curacao.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Santa_Isabel.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT+2.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.IdentityModel.Selectors.Resources.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Toronto.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\plugin.properties.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\rarrow.gif.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench3.nl_zh_4.4.0.v20140623020002.jar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\TipBand.dll.mui.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Port_Moresby.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jre7\lib\fonts\LucidaBrightItalic.ttf.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Mozilla Firefox\defaultagent.ini.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\WhiteDot.png.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiItalic.ttf.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\flight_recorder.png.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.flightrecorder.controlpanel.ui_5.5.0.165303.jar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Microsoft Games\Purble Place\it-IT\PurblePlace.exe.mui.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationUp_SelectionSubpicture.png.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Tegucigalpa.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jre7\lib\ext\dnsns.jar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Web.Abstractions.dll.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsfin.xml.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-profiling.xml.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-uihandler_zh_CN.jar.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Common Files\System\ado\adovbs.inc.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ms.pak.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\es-419.pak.tmp	9cc4c3fc90bb2838aabc217212b4d1b0N.exe

C:\Users\Admin\AppData\Local\Temp\9cc4c3fc90bb2838aabc217212b4d1b0N.exe
"C:\Users\Admin\AppData\Local\Temp\9cc4c3fc90bb2838aabc217212b4d1b0N.exe"
1⤵
- Drops file in Program Files directory
PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2172136094-3310281978-782691160-1000\desktop.ini.tmp

Filesize
91KB

MD5
4b900c419b89b5dd09a3239eecf5c721

SHA1
0e098a6339c95eded2ade6bbe2516317d79d270e

SHA256
ac7c22e1cc283665b1690cad8367a34c0dc3b669eb704a6932ced2fffa0ecba8

SHA512
cfe3962d6876e21e059c704d3f744cdfad8434a10bed7eddd80dd01c1b075736b40c035c2d7d92061239671bc908623d7e99894940867e7b424e6f05c7edc9aa

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
100KB

MD5
2dcb0fa8ed47008a9a2f5db76b61bd1e

SHA1
0264c2251e86ac525e518f2cfe9108ef08d97033

SHA256
426ac9db1595310bd2aab206895e0a9dbd22264bfa3b52a8896c347eaa82f798

SHA512
d7e8f22c4cce77d8701e1906e11a5f299a8f73f985768c0bc3cf51253e74bec4b57404989cff7cefb0335c0212a8bea8d0313a8f15ff9d47f04e321bf6f87cbc

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads