5cb4645968087b667ab8c32f71eb3bc050e71f84624f1d41180390e76a5fb14e

Analysis

max time kernel
119s
max time network
16s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
21/07/2024, 07:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8dd4193fd76d6ee46efc75b07ae472e0N.exe
Size

198KB
MD5

8dd4193fd76d6ee46efc75b07ae472e0
SHA1

aebeedb323297c6d930c3957e625483a2f082ffa
SHA256

5cb4645968087b667ab8c32f71eb3bc050e71f84624f1d41180390e76a5fb14e
SHA512

738f5faba9438d8c64a9a388aac70703e745c9da0693433ddc86835f6152fada8eb46bc1468e485284f66625504f1d48eee557f61bc7bf98b06e8d51744816c4
SSDEEP

768:W7BlphA7pARFbhKKVeIuKVeIaCgx+qsaCgx+qs9lRlCM:W7ZhA7pApaX0aX09rd

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (2694) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Notebook.jpg.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\Panel_Mask_PAL.wmv.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\3RDPARTY.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Managua.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\mix.gif.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-core-output2.xml_hidden.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\EST5EDT.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\PreviousMenuButtonIcon.png.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.services.nl_ja_4.4.0.v20140623020002.jar.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\THIRDPARTYLICENSEREADME-JAVAFX.txt.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Internet Explorer\Timeline.dll.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic.ja_5.5.0.165303.jar.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\de-DE\ChkrRes.dll.mui.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\7-Zip\Lang\uk.txt.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\7-Zip\Lang\yo.txt.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\selection_subpicture.png.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\license.html.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.mbeanbrowser.ja_5.5.0.165303.jar.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\bin\orbd.exe.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Tongatapu.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\plugin2\msvcr100.dll.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\7-Zip\Lang\be.txt.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\feature.xml.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\7-Zip\descript.ion.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_ko.properties.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Anadyr.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.css.swt_0.11.101.v20140818-1343.jar.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.nl_ja_4.4.0.v20140623020002.jar.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\Tashkent.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Bougainville.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\FlickAnimation.avi.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader_icd.json.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Internet Explorer\jsdbgui.dll.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\prism-d3d.dll.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.nl_zh_4.4.0.v20140623020002.jar.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-coredump_ja.jar.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationLeft_ButtonGraphic.png.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_plain_Thumbnail.bmp.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\w2k_lsa_auth.dll.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Bougainville.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\META-INF\eclipse.inf.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\bin\sunec.dll.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\lib\ext\meta-index.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Santiago.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\feedbck2.gif.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Nome.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ja-JP\mshwLatin.dll.mui.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\ShapeCollector.exe.mui.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\performance.png.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\bin\sysinfo.bat.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Manila.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\notes-static.png.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationUp_ButtonGraphic.png.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Title_Page.wmv.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Atikokan.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrdeslm.dat.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Common Files\System\msadc\msadco.dll.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssv.dll.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_zh_HK.properties.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Microsoft Games\Minesweeper\de-DE\Minesweeper.exe.mui.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipssrb.xml.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground.wmv.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Panama.tmp	8dd4193fd76d6ee46efc75b07ae472e0N.exe

C:\Users\Admin\AppData\Local\Temp\8dd4193fd76d6ee46efc75b07ae472e0N.exe
"C:\Users\Admin\AppData\Local\Temp\8dd4193fd76d6ee46efc75b07ae472e0N.exe"
1⤵
- Drops file in Program Files directory
PID:1292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3502430532-24693940-2469786940-1000\desktop.ini.tmp

Filesize
199KB

MD5
9838f0b45beaddf041849b7a0970a568

SHA1
3a83396bb8a34d781595ba481c41c98192c7f075

SHA256
6e95ed230bad17fcf8ba92b590df0deb4bb8abc212a1ff56595085c05a1db50a

SHA512
30965dcbd91a9a8414819638df3214840a9a632f20e16d5e088e17326cc744401f964815b48ce0f6166fbce72cc70a485cd67ff6701a6e670d79e5b75bc3759e

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
208KB

MD5
11fc2d98482f0e651842bc365020e89d

SHA1
8016466ad2821db13bbd6beafdf5d17be637951a

SHA256
7e852216cea985316e3574ec53b37bf9907d84b9096c9e736a9674daa279cf25

SHA512
9b8d28af6427b79176e13143f7a1e23497a27011dbd3ccc69db2d40ecdd94599c41ca3012b9881ec0078779fc2d6815fa10b62ac12a407f30c9fc44f54420026

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads