f1f5179963d0b14b2417a5595f4e99279c5572b31ab9f7f5684d71855c0577a5

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
20/07/2024, 08:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6c7fe08379234b1103df4bc9d474f460N.exe
Size

37KB
MD5

6c7fe08379234b1103df4bc9d474f460
SHA1

fa7205369941f320bf06a358868e22b2ff7959c4
SHA256

f1f5179963d0b14b2417a5595f4e99279c5572b31ab9f7f5684d71855c0577a5
SHA512

9c5907d47d7645db0555504ff30e6d9c777f9f28df6a037f394c052c5d58f99bc051d95eb37732b4e7a5085c5d74ae34a1a190d0ccd39e9088d66f54870ce38c
SSDEEP

768:W7BlpppARFbhjbhg42LcfpR42LcfpvNFK:W7ZppApBULcfpHLcfpvDK

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3445) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\Beulah.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System.Data.Services.Client.resources.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\15x15dot.png.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\local_policy.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application_5.5.0.165303.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-nodes_ja.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Tallinn.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\WindowsFormsIntegration.resources.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\7-Zip\7z.sfx.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\WidevineCdm\LICENSE.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jconsole.exe.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jre7\lib\tzmappings.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kuching.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.commands_3.6.100.v20140528-1422.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Anadyr.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Common Files\System\Ole DB\es-ES\oledb32r.dll.mui.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sw.pak.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\README-JDK.html.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\fontconfig.bfc.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\tipresx.dll.mui.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Ushuaia.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Bangkok.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ecf.filetransfer_5.0.0.v20140827-1444.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\System.Speech.resources.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-crt-multibyte-l1-1-0.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.Runtime.Serialization.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-util-enumerations.xml.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-swing-plaf_zh_CN.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Scoresbysund.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Samarkand.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_zh_CN.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP.bat.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Faroe.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\e4-dark_globalstyle.css.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-openide-explorer.xml.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsjpn.xml.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Caracas.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jre7\lib\security\javafx.policy.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\es\PresentationBuildTasks.resources.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libgme_plugin.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Common Files\System\Ole DB\es-ES\msdasqlr.dll.mui.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\sound.properties.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\UCT.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.webapp.nl_zh_4.4.0.v20140623020002.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.servlet_3.0.0.v201112011016.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Etc\GMT-13.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Microsoft Games\Purble Place\it-IT\PurblePlace.exe.mui.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationProvider.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libequalizer_plugin.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwresmlm.dat.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\serialver.exe.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_es.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.model.workbench_1.1.0.v20140512-1820.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.publisher.eclipse_1.1.200.v20140414-0825.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.servlet_8.1.14.v20131031.jar.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Mozilla Firefox\api-ms-win-core-file-l1-2-0.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\whiteband.png.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Antigua.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Belize.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CST6CDT.tmp	6c7fe08379234b1103df4bc9d474f460N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll.tmp	6c7fe08379234b1103df4bc9d474f460N.exe

C:\Users\Admin\AppData\Local\Temp\6c7fe08379234b1103df4bc9d474f460N.exe
"C:\Users\Admin\AppData\Local\Temp\6c7fe08379234b1103df4bc9d474f460N.exe"
1⤵
- Drops file in Program Files directory
PID:2668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3551809350-4263495960-1443967649-1000\desktop.ini.tmp

Filesize
37KB

MD5
ecabb57c113eaabae7545850bac84478

SHA1
18fa0970d186bb8328bae60381342674dbc721b0

SHA256
74cfc6331253614b5b36e9d4ee6f7e3113ad39ac3083390e92988d4722f27c81

SHA512
9d3662a8cb6916d5a0f3ef7bae509958e52dc1f0279967fd6a8593816708616f04040e95afbb193859439c8d076485a5e66e319d8ecfcbed2c3060a3844876c2

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
46KB

MD5
3ec0e4018d970745764099fbbaa5a0d0

SHA1
06326574069c372d66819320180d24a64836f4c4

SHA256
032a36080f0b689286c710958eec080e0d62f54dffdff60e1e3be053b9ce0ad4

SHA512
5cd57eec781a6e2cb8e7253cd8f409920e0f23adb4c0daa262c6ec67aba0190841a0e1f970e46d4a69d22a4cb7c10133517f08ea015296e6dcb63e7df9eb23d5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads