Analysis
-
max time kernel
95s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/10/2022, 21:25
Behavioral task
behavioral1
Sample
923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe
-
Size
86KB
-
MD5
6db6d58d88f22b2454c6f905700bd5f0
-
SHA1
06458f10118587d025d14e920178b31051b768de
-
SHA256
923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0
-
SHA512
f2fd10f9dbef638a5d5485227401fe10d1791c0d55d43bc0ffdf5454288f1cd2bfd8367cfcba84091405002d2b5bc9df6affd708fbfd76eb1fbf08204986658a
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSnRk6uaea6f7+r:5JjcF8KfCOcjk+guPVjSeq16O
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2080-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/2080-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\winxcfg.exe 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\honies with incredibly delicious big boobs.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\amateur slut fingering herself threw her wet panties.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\tenderonie who insist her pussy must always be free.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\black girl gets dildo wet.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\honie with a ka-boom hot ass and delicious cunt.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\sexy pink pussy girl taking it off.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\hairy lezzies torching it up with hot candles.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\2 horny babes doing 1 lucky dude.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\robin throating and fucking.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\Hotmail Hacker.exe 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\preteen snuff sex rape with a stick hardcore.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\wild ebony slut taking two cocks.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\hot blonde teen sucking old dick.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\babe doing boyfriend and his buddy.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\password stealer.exe 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\pamela anderson naked.mpg.exe 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\Digimon.exe 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\little brown cup-cake with plump boobs and sweet beaver.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\krystal steal getting her bald clam filled.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\Britney spears nude.exe 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\win2k serial.exe 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\hot hungry sluts sucking cum for a line of coke.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\ebony spreading her pink wet pussy.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\invisible IP.exe 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\blonde on couch gettin tight anal fucking.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\genuine indian slut posing.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\fat grannies action.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\15 year old webcam.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\Two girls - Blonde and Brunette - Giving head.exe 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\closeups of horny slut serving up sweet hairy bush.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\luscious babe with serious ass and firm titts.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe File created C:\Windows\SysWOW64\macromd\two large black bones in a small white box.mpg.pif 923cf3c19aee38fe5ab77c30c7c144e0217870ed467d2c7e0b8f8406636f2da0.exe