b8cb8d3e6f5c6daccf24c67bb7bee42f559932cf3549e2e79d21c994a0d923e2

Analysis

max time kernel
120s
max time network
17s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

adaaf53a60609c225a17dc43eae69ad0N.exe
Size

80KB
MD5

adaaf53a60609c225a17dc43eae69ad0
SHA1

c394f8a6ff24635f269fcfaf6b43c02365e108f8
SHA256

b8cb8d3e6f5c6daccf24c67bb7bee42f559932cf3549e2e79d21c994a0d923e2
SHA512

209f27f551b164d9360233abb7e9663d7eba83aae7c2bbff67f10d9646408cea37095504bcf0bc8be71087417b963ec9602ba898147d1ff7bb5e2e8a8e2a3153
SSDEEP

1536:W7ZhA7pApH1d9oVLQthbqbY9oVLQthbq51Rn6wt7t5m0m698+Q+X:6e7WpP9oVLQthbYY9oVLQthbUrt7t5m6

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (2899) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Simferopol.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Macquarie.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Sydney.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jface.text.nl_zh_4.4.0.v20140623020002.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.sat4j.core_2.3.5.v201308161310.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_zh_CN.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Manila.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.core.contexts_1.3.100.v20140407-1019.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.registry_3.5.400.v20140428-1507.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\nbexec.exe.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Glace_Bay.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Novosibirsk.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\org-netbeans-lib-profiler-common.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\HST10.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Spades\en-US\shvlzm.exe.mui.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\mshwjpn.dll.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\DVD Maker\it-IT\OmdProject.dll.mui.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\flavormap.properties.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ca@valencia\LC_MESSAGES\vlc.mo.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\sk.pak.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\verify.dll.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\epl-v10.html.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerEvaluators.exsd.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.metadata.repository.nl_ja_4.4.0.v20140623020002.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Data.Services.Design.dll.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hu-HU\tipresx.dll.mui.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Common Files\System\en-US\wab32res.dll.mui.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\NavigationRight_SelectionSubpicture.png.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-utilities.xml.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Australia\Currie.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Wallis.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\SystemV\CST6.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\de\System.Data.Services.Design.resources.dll.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrdeslm.dat.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\jstack.exe.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\epl-v10.html.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.intro.nl_zh_4.4.0.v20140623020002.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-host-views_ja.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\VideoLAN\VLC\axvlc.dll.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Ojinaga.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrcatsh.dat.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\es.pak.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-text_ja.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-uihandler.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\t2k.dll.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.addons.swt.nl_zh_4.4.0.v20140623020002.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\update_tracking\com-sun-tools-visualvm-jvm.xml.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\d3dcompiler_47.dll.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Jakarta.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.intro.ja_5.5.0.165303.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-progress-ui_zh_CN.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jre7\lib\deploy\messages_fr.properties.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\olh001.htm.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\triggerConstraints.exsd.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.apache.jasper.glassfish_2.2.2.v201205150955.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\es-ES\bckgRes.dll.mui.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationUp_SelectionSubpicture.png.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Edmonton.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-options-keymap_zh_CN.jar.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\Amsterdam.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Efate.tmp	adaaf53a60609c225a17dc43eae69ad0N.exe

C:\Users\Admin\AppData\Local\Temp\adaaf53a60609c225a17dc43eae69ad0N.exe
"C:\Users\Admin\AppData\Local\Temp\adaaf53a60609c225a17dc43eae69ad0N.exe"
1⤵
- Drops file in Program Files directory
PID:964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3434294380-2554721341-1919518612-1000\desktop.ini.tmp

Filesize
81KB

MD5
945fd61efa95316dc3b22707fecc346c

SHA1
c4b18b36491420ad564869649a0d9c07b905f165

SHA256
210ea993aed5d3be32fa99b080cadf0ca2e5656b8b58377786ac5a0d7c4feb74

SHA512
8a44b70744d90865d1c92890c42bd6cc1df01687f1e47624706dac8a90da97fefa26c350ffc8c2c317fe9ef5981a155da82d7f665d181a70401568827e7d4d96

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
89KB

MD5
37110f159effce3d88b853af0298a347

SHA1
9016fbdc29db99302f53a8c24f018a6d1f6ef208

SHA256
76d451d9c2d81ba44a4ebf7f43cd818f747168d5ff6e757d642579c08becc469

SHA512
dab4901f958a96a256883414bf6e43dae427b312b2fa0a46dfe27651340cf92ba321587bb64f6fb51d7292a9fc0eecb7f7c1419e0ffacec18ba480b534cb0be2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads