362b06a8c1cc2736c0ec645fad2f115817b003cfa79dc2ae925cb5be6fdfa82d

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
22-07-2024 13:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b7df533a104e32e824a00c94725dfef0N.exe
Size

36KB
MD5

b7df533a104e32e824a00c94725dfef0
SHA1

0e2ebd534653075fe83542aeeaca330d983b01c5
SHA256

362b06a8c1cc2736c0ec645fad2f115817b003cfa79dc2ae925cb5be6fdfa82d
SHA512

3ada72292aecc33722d628a96ef92a1d7dbf5a30ba89473406f13fd101903cd0e89cb9f16281d933efabd44d1d6a8199764c3d7171b662d8ba9645113436a63d
SSDEEP

384:yBs7Br5xjL8AgA71Fbhv/FdwAHAJOvwAHAJO5zCtAtp:/7BlpQpARFbhjHAJUHAJGZ

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (309) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\rtscom.dll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\MSInfo\de-DE\msinfo32.exe.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\d3dcompiler_47.dll.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\ko-kr.xml.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrenclm.dat.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\System\msadc\fr-FR\msadcor.dll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\System\msadc\ja-JP\msadcor.dll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\7-Zip\Lang\en.ttt.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\System\msadc\msdarem.dll.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyNotesBackground_PAL.wmv.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\16_9-frame-background.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\7-Zip\Lang\pl.txt.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground.wmv.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\uk.pak.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\IpsMigrationPlugin.dll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Garden.jpg.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\System\msadc\msaddsr.dll.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\bod_r.TTF.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\circleround_glass.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Stacking\1047x576_91n92.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\System\ado\ja-JP\msader15.dll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Pipeline.dll.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_VideoInset.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\LayeredTitles\layers.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\VideoWall\videowall.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\nl.pak.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\7-Zip\Lang\ext.txt.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXEV.DLL.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\button-highlight.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\bn.pak.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\da.pak.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Seyes.emf.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\fr-FR\MSTTSLoc.dll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\it-IT\OmdProject.dll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\BabyBoyMainToScenesBackground_PAL.wmv.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\7-Zip\Lang\th.txt.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrfralm.dat.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\flower_trans_rgb.wmv.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\NavigationRight_SelectionSubpicture.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\FlickLearningWizard.exe.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\ipsen.xml.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\button-highlight.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad.xml.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\InputPersonalization.exe.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\btn-next-static.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\PassportMask_PAL.wmv.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\7-Zip\Lang\tk.txt.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\Alphabet.xml.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-dayi.xml.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Desktop.ini.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS20\es-ES\MSTTSLoc.dll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Pets_image-frame-backglow.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\7-Zip\Lang\pt-br.txt.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrdeslm.dat.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\hwrfrash.dat.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\System\Ole DB\ja-JP\sqlxmlx.rll.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\scrapbook.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\7-Zip\Lang\ca.txt.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\VSTOLoader.dll.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\en-US\InkWatson.exe.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\es-ES\mip.exe.mui.tmp	b7df533a104e32e824a00c94725dfef0N.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\play-static.png.tmp	b7df533a104e32e824a00c94725dfef0N.exe

C:\Users\Admin\AppData\Local\Temp\b7df533a104e32e824a00c94725dfef0N.exe
"C:\Users\Admin\AppData\Local\Temp\b7df533a104e32e824a00c94725dfef0N.exe"
1⤵
- Drops file in Program Files directory
PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2212144002-1172735686-1556890956-1000\desktop.ini.tmp

Filesize
37KB

MD5
5994833dfe485488382673a16bbcad57

SHA1
e7b851c088cbdfd5d22bc9057bb92d18058cae39

SHA256
637fa53d77f5729c37e7ef90c24f3aa735bfa21d9ddb02230134c980a90c69d1

SHA512
42d4cb33ebc35d24cd32dd3da1b43b6d8d757c1cdc91cf6dd2687e9a82e0969956d26b4e3bf3a5f85d9c2d69881312d60540792547cd85e01689e4baf7afbf28

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
45KB

MD5
c330d1e17ec4ee965d5d69a708dabc76

SHA1
15b47f49fb2737aded4bb0a3f92c8009128fdf02

SHA256
c115c1dab66e5369e797aa9e10f4009e3fdedf80ec28bf84bc5c7ebff81863ba

SHA512
933444379900ed59f3d7fd3a0f0f92d98ac5473b7430e99af0ccd541cb4f26f225142f95d4b4c674b3c33885ccb65da9bb69ff59924a6c1f03b8a81000f7ff7a

Download Submit
memory/2288-0-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download
memory/2288-68-0x0000000000400000-0x0000000000408000-memory.dmp

Filesize
32KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads