Analysis
-
max time kernel
36s -
max time network
42s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
01-10-2022 21:25
Behavioral task
behavioral1
Sample
31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe
-
Size
69KB
-
MD5
74e41b9535d1d9e6995a32ea562de9f6
-
SHA1
3f70a06b4fa2c4e9d6ea706b45e9ec9b4c69ecfe
-
SHA256
31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e
-
SHA512
0d5d8d8260cd8d2c25af15d91a02249f0aa357098e073184efefa20f440668204215dd1b961b9a555ccc938086c439fb0303fdaeb94a175bfe3bb5ca5dbddc2e
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSSM:5JjcF8KfCOcjk+guPVjSSM
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1992-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1992-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\Britney Spears Dance Beat.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\Blonde and Japanese girl bukkake.mpg.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\closeups of horny slut serving up sweet hairy bush.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\hot slut with a big dildo.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\DivX pro key generator.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\cute honie spreading flawless ass and juicy twat.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\sexy hot teens gettin busy in shower.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\nasty slut sucking huge cock.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\pamela anderson naked.mpg.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\illegal porno - 15 year old raped by two men on boat.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\some fine amateur pussy shots from behind.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\two teenie boppers learning to eat pussy.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\babes with an assortment of delicious big juggs.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\mature show older pussy and happy to do it.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\sunbathing beauties tanning tender pussy lips.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\Website Hacker.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\AIM Account Hacker.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\Flash Golf.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\Napster Clone.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\two large black bones in a small white box.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\an older fat mom spreading wide.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\firm ass honie with thick lips made for sucking rods.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\couple babes getting off with well hung dude.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\senior blonde fucking and suckin like a teen.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\jenna jameson sex scene huge dick blowjob.scr 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\Winzip.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\babe with peach shape pussy that needs it bitten.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\kitty-cat with horny beaver that needs licking.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\some hard sucking and fucking babes.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\redhead getting a group facial at a wild party.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\winxcfg.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\siemens unlocker.exe 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe File created C:\Windows\SysWOW64\macromd\babe celebrating new years naked and spreading cunt.mpg.pif 31827ca58ac43270f616250d54d18813b3c13200ee76db47fd525b0a0474840e.exe