202fd69346f89e24d08ceb82af025f7c267d20647dd7f42ada36874266b2a2f0

Analysis

max time kernel
120s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
20/07/2024, 07:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

61ac104be394dd46368b9b4911363e90N.exe
Size

64KB
MD5

61ac104be394dd46368b9b4911363e90
SHA1

49eae66ce29aead280ecf78cff21dcb38cf8f1b2
SHA256

202fd69346f89e24d08ceb82af025f7c267d20647dd7f42ada36874266b2a2f0
SHA512

f1d7106df3d66a9102840891bb10afdefdaa74dc244039fa518bcb1390f14b134548cba947c04229bfe2526860226b51afa9c4f4ca9be106125690851a088e1c
SSDEEP

768:p7BlphA7dASbS+m0CAbLg++PJHJzIWD+dVdCYgck5sIZFlzc3/Sg2aDM9uA9DM9o:p7ZhA7dAp1++PJHJXA/OsIZfzc3/Q8y

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3220) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\mip.exe.mui.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Riga.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.Services.Client.resources.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.descriptorProvider.exsd.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-util-enumerations.xml.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\DVD Maker\OmdProject.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Internet Explorer\iexplore.exe.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Montevideo.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\1047x576black.png.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\rmid.exe.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Rio_Branco.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-5.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-print.xml.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Microsoft Games\FreeCell\fr-FR\FreeCell.exe.mui.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\PreviousMenuButtonIcon.png.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.extensionlocation.nl_ja_4.4.0.v20140623020002.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-application-views.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\deploy\messages_fr.properties.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\zi\CST6CDT.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Warsaw.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Microsoft Games\Chess\desktop.ini.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Microsoft Games\More Games\en-US\MoreGames.dll.mui.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Common Files\System\msadc\msdaremr.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\babyblue.png.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerConstraints.exsd.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-nodes.xml.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\bin\glass.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-charts.xml.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\bin\jpeg.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\feature.xml.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Indiana\Indianapolis.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.Speech.resources.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\7-Zip\Lang\pt.txt.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.htm.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.ds_1.4.200.v20131126-2331.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\bin\jli.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\mip.exe.mui.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-bullet.png.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\about.html.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.el_2.2.0.v201303151357.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-sampler_zh_CN.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Eirunepe.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Tijuana.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-jmx.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Irkutsk.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libflacsys_plugin.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Common Files\System\Ole DB\sqloledb.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository.nl_zh_4.4.0.v20140623020002.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Tashkent.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\PresentationBuildTasks.resources.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sr\LC_MESSAGES\vlc.mo.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-1.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Gibraltar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.attach_5.5.0.165303.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-settings.jar.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\bin\installer.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Riyadh.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdasqlr.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationLeft_ButtonGraphic.png.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Swift_Current.tmp	61ac104be394dd46368b9b4911363e90N.exe
File created	C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll.tmp	61ac104be394dd46368b9b4911363e90N.exe

C:\Users\Admin\AppData\Local\Temp\61ac104be394dd46368b9b4911363e90N.exe
"C:\Users\Admin\AppData\Local\Temp\61ac104be394dd46368b9b4911363e90N.exe"
1⤵
- Drops file in Program Files directory
PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2958949473-3205530200-1453100116-1000\desktop.ini.tmp

Filesize
64KB

MD5
8b587845b32b8b735aa755ad3e3036f4

SHA1
71f7d9f16da3772bd8ea77200d8280516d36065e

SHA256
3802dac92a50d1d73ef6a8cee6f3bf6b0a8c674532df9b6a432347aad4b7d716

SHA512
ad24d508a53e87abeb0acb8796715281bfef1b37bc25a498ba5af5ff725d777b10140ebcede7a903b7556402c098abbc60bf8d649571beb517a46e38154090ed

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
73KB

MD5
10af9117c2068a6ef2f80024567705f2

SHA1
dbad4e3d964fea3fc3d7d456a0d35ba7ad4259d5

SHA256
85d11648f0e17893c83afa0f7bb65a47bfea6e0dbedf2fc8d9918f11bb195017

SHA512
eb32e0fd5b9669b13f7167b4b6a164351c2ee571ccfd9deef053dfb4e9160c103196d8f88ed3a77728aeb440c61a8c05bb0b58667c8f2e52b124e21636b55ce5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads