6a3db19b2054ab1b7fc42990bb33b9d0567e3be0f99dae1309d401b68b612f61

Analysis

max time kernel
120s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 02:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4accd58304ae30fe1cc06cb4b2e35f60N.exe
Size

70KB
MD5

4accd58304ae30fe1cc06cb4b2e35f60
SHA1

7a23233ab0f6b8ab1024eb78e96d1fc7f4b48bdf
SHA256

6a3db19b2054ab1b7fc42990bb33b9d0567e3be0f99dae1309d401b68b612f61
SHA512

e0fd873a9f457f30c40b3afe2f92b73c9b0462155140aba33976662bc32147a797f17063986f20b531650d12b8789d872258c17708454a950591119fee37a75e
SSDEEP

1536:V7Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q8zxH:fnyiQSoy

Score

9^/10

ransomware upx

Malware Config

Signatures

Renames multiple (339) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/1612-0-0x0000000000400000-0x000000000040B000-memory.dmp	upx
behavioral1/files/0x0004000000017801-2.dat	upx
behavioral1/files/0x0002000000010463-6.dat	upx
behavioral1/memory/1612-70-0x0000000000400000-0x000000000040B000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\System\Ole DB\en-US\msdasqlr.dll.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\System\Ole DB\sqloledb.dll.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_matte.wmv.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\Title_select-highlight.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_wer.dll.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\7-Zip\Lang\hr.txt.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\7-Zip\Lang\tr.txt.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoBeta.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Internet Explorer\jsdebuggeride.dll.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\7-Zip\Lang\pa-in.txt.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\System\ja-JP\wab32res.dll.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\System\msadc\es-ES\msdaprsr.dll.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\System\Ole DB\fr-FR\msdasqlr.dll.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\203x8subpicture.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\7-Zip\Lang\nn.txt.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\System\ado\msadomd.dll.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Perf_Scenes_Mask1.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Sand_Paper.jpg.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\NavigationLeft_ButtonGraphic.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-highlight.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\boxed-join.avi.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\ea.xml.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\symbols\symbase.xml.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\15x15dot.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fi-FI\tipresx.dll.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Heart_VideoInset.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Internet Explorer\en-US\networkinspection.dll.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\7-Zip\Lang\sa.txt.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\uk.pak.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\VisualElements\SmallLogoCanary.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DisconnectUninstall.tiff.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\full.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_frame-imageMask.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationUp_ButtonGraphic.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\7-Zip\Lang\sw.txt.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\InputPersonalization.exe.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\System\ado\msader15.dll.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\vk_swiftshader.dll.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\1047x576black.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\resources.pak.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\7-Zip\Lang\ast.txt.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\ParentMenuButtonIcon.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainBackground_PAL.wmv.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\1047x576black.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\pushplaysubpicture.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Google\Chrome\Application\chrome_proxy.exe.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Internet Explorer\perf_nt.dll.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\System\Ole DB\msdatl3.dll.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\MainMenuButtonIcon.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\NavigationLeft_ButtonGraphic.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\whitemask1047.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Stars.jpg.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\Common Files\System\Ole DB\ja-JP\sqlxmlx.rll.mui.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_ButtonGraphic.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_ButtonGraphic.png.tmp	4accd58304ae30fe1cc06cb4b2e35f60N.exe

C:\Users\Admin\AppData\Local\Temp\4accd58304ae30fe1cc06cb4b2e35f60N.exe
"C:\Users\Admin\AppData\Local\Temp\4accd58304ae30fe1cc06cb4b2e35f60N.exe"
1⤵
- Drops file in Program Files directory
PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2212144002-1172735686-1556890956-1000\desktop.ini.tmp

Filesize
70KB

MD5
2370fbb5ef3e13ab72da257870fb4f15

SHA1
ad850b4502c8481fb2de228a7120f067dfa75e2c

SHA256
1da532f86597754cf46b7fe59df148e910458537a58560a052fb545d62220bf2

SHA512
13722ee48dd4fa3928141cccd8573debac355a6cc4277cfb17a002012855acecd36c522c5078214181a0293041b3c9c166a35cbae8be7bc78b027af1b7d7542f

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
79KB

MD5
48657361317d1268fc87b536ccbb7b39

SHA1
8f5b81df545b5cd9114a5a1d0a8657a279fea5bb

SHA256
df2713f155fc4ce7dad43eae0faddef63c293bbd504db0905fbd51be6b3438b0

SHA512
d96ae349411dd7dfd4d416d25212c7969dbbcb13cd9d694cf1979c6ca1d334d77364995cc6e0e8fb8169db1cb67fa26de35e591dd656bab064922ba7d75d016a

Download Submit
memory/1612-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/1612-70-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads