Analysis

  • max time kernel
    120s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 06:17

General

  • Target

    7a38852d42d1d17378cbd9a758326ee0N.exe

  • Size

    42KB

  • MD5

    7a38852d42d1d17378cbd9a758326ee0

  • SHA1

    636496974eeab9ede1d7a3551c9f7ae0644924ad

  • SHA256

    136c45902c61aab06d274daaaa987c922455f642896300d618c8f5b5a516144f

  • SHA512

    accf55ca183c42c8f88ab4b8cf3819ef08eaa4d5b26ecf48f13c9077dd86dfb797d2f9d07a421ab8b26d897c1b98c8303063b2e6acccee2ffb0abeb6ed8ed044

  • SSDEEP

    768:W7BlpppARFbhknrAqQ/Q6JYAJYMMF/2An:W7ZppApktshJYAJYDT

Score
9/10

Malware Config

Signatures

  • Renames multiple (3373) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Drops file in Program Files directory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7a38852d42d1d17378cbd9a758326ee0N.exe
    "C:\Users\Admin\AppData\Local\Temp\7a38852d42d1d17378cbd9a758326ee0N.exe"
    1⤵
    • Drops file in Program Files directory
    PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\$Recycle.Bin\S-1-5-21-3434294380-2554721341-1919518612-1000\desktop.ini.tmp

    Filesize

    43KB

    MD5

    7fde132012bc63433306b6c746161f44

    SHA1

    62ff23bdaab87d6a507affa3e32a383d59239096

    SHA256

    de09d3abe4c5967bb71d1e9db860c721ab6a8841adff1cd36322e22b8382bf08

    SHA512

    eadf9bd3f79e00a07d2d517c50162895a725cddb6f9ede5d7e9d22ec0f7d490e1fe4cd970a621b0fb1b76ac3996024bdc5a25a3d263230b2b6767917b6c31859

  • C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

    Filesize

    52KB

    MD5

    b2abbba54918d84b117b3099f60382cf

    SHA1

    a45406ce375b72d792db9591bd106d3db45f82e1

    SHA256

    77b0ac0c296d01efa8a7ddb241f5fe4acbf0b49e322bc3709a4c611e1ef4bdd7

    SHA512

    68e95198feaf95645c487439ce34d960d3d6caf2c0b4e23a2147eada715080d584c0902150e612bfeeb0c09a18b9a99c45de38a3710c7c28aec6865b9533fef1