57217d3cfe415a3fa8bac6481669c6ca50958bacc29bdc65e1c74a370cba1128

Analysis

max time kernel
120s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
21/07/2024, 03:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

58318a0ce95b1f2d34164e17b5f6d2e0N.exe
Size

41KB
MD5

58318a0ce95b1f2d34164e17b5f6d2e0
SHA1

8a0bac09ff7bb4a14ce5c2b49901ab1a337ea739
SHA256

57217d3cfe415a3fa8bac6481669c6ca50958bacc29bdc65e1c74a370cba1128
SHA512

38aabc5817c412f0aaa914843c9ef7dd50b4dec8c87407bd791b545443f5c3b4e62d03436f47c896992cd603ad0d2c287466b6d26a9b828646bbc50d2b17b199
SSDEEP

768:W7BlphA7pARFbhOm0CAbLg++PJHJzIWD+6/huEQhuE/:W7ZhA7pApH1++PJHJX18EQ8E/

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3149) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\images\cursors\invalid32x32.gif.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Hovd.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kathmandu.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Common Files\System\ado\msadox.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Edmonton.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.text.nl_zh_4.4.0.v20140623020002.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\high-contrast.css.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\jhall-2.0_05.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Sao_Paulo.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Mozilla Firefox\maintenanceservice.exe.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Mozilla Firefox\msvcp140.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\images\vlc16x16.png.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\7-Zip\Lang\ga.txt.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\tipresx.dll.mui.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-editor-mimelookup.xml.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\vlc.mo.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Palau.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Microsoft Games\More Games\en-US\MoreGames.dll.mui.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Xml.Linq.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT-10.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-lib-profiler-common_zh_CN.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert.ja_5.5.0.165303.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.net.nl_zh_4.4.0.v20140623020002.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\ko.pak.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\java.exe.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Caracas.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Santo_Domingo.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\zh_TW\LC_MESSAGES\vlc.mo.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\tipresx.dll.mui.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_highlights_Thumbnail.bmp.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Tirane.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\TipBand.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Warsaw.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\UIAutomationClientsideProviders.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\VideoLAN\VLC\New_Skins.url.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\plugin.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-autoupdate-cli.xml.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\de\WindowsFormsIntegration.resources.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libvnc_plugin.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core.xml.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\tipskins.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.swt.nl_zh_4.4.0.v20140623020002.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\bin\jsound.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Mozilla Firefox\lgpllibs.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.Speech.resources.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\requests\playlist.xml.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\java-rmi.exe.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\orbd.exe.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Kuala_Lumpur.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Srednekolymsk.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-host-remote.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwresslm.dat.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\MANIFEST.MF.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.commands.nl_zh_4.4.0.v20140623020002.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-api-search.xml.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jre7\Welcome.html.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libaudio_format_plugin.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Macquarie.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-actions.jar.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.Entity.Design.Resources.dll.tmp	58318a0ce95b1f2d34164e17b5f6d2e0N.exe

C:\Users\Admin\AppData\Local\Temp\58318a0ce95b1f2d34164e17b5f6d2e0N.exe
"C:\Users\Admin\AppData\Local\Temp\58318a0ce95b1f2d34164e17b5f6d2e0N.exe"
1⤵
- Drops file in Program Files directory
PID:484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3502430532-24693940-2469786940-1000\desktop.ini.tmp

Filesize
42KB

MD5
91083f1b6d166913c5d11d7c4ae6d31e

SHA1
75b3ba7ea8a7fc537fcef68566ef7c6b2dcb7067

SHA256
77fcc72c2f8d837704d8450808ead2e6bb422823428ffbbeaee2f383a1b0597e

SHA512
82a73f6f000bb1b61cb10ca3b2f776e252a3ac50b4a86bf212fdb1fb46ad6f30d69b1e02cfaa2f7b6df2bd61c57c6e872ade1c05a32f62df43d31e446266b989

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
51KB

MD5
3adb99623b252f6c7a1935a5a0f68207

SHA1
e784a8268f3773715145525dd6ec176d82e4bc57

SHA256
137dda05dc35f34df23c9f2817fc6ae3481b007cd767fad081f045f6ffe31c7e

SHA512
0af29990d40e1bd42099609a3138135205cac7da949601bcc5de76cc0e10739b13385f70a8e35b4287a273ac13d1417e148ed1abc71ed8199f250e4ceee0e95b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads