Analysis
-
max time kernel
36s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
02-10-2022 23:47
Behavioral task
behavioral1
Sample
1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe
-
Size
92KB
-
MD5
66ebe8a011b4ceb20d03f5ec417a73e3
-
SHA1
be58dd735e14af91023d64ca5917300808228221
-
SHA256
1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986
-
SHA512
37354f048f52a881ade6a31e7e027828bdf05ca2ccf3eb09fc81e0faa22766d07cfae22f641f06a04a9e85b46d78a911861aeb92c2d672df3d3948ec7b1fe256
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMS2UtMfBVMf3GqIRxkz:5JjcF8KfCOcjk+guPVjS2USIf3DAkz
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1568-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1568-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\trio having hardcore fucking fun.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\two hot college girl fucking in class.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\Lolita preteen sex.mpeg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\GTA 3 Crack.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\little brown cup-cake with plump boobs and sweet beaver.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\horny housewife looking for some action.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\action with three chicks getting it on with a guy.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\15 year old on beach.mpg.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\Yahoo mail cracker.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\babe celebrating new years naked and spreading cunt.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\couple babes getting off with well hung dude.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\maid's vagina plowed by big cock.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\fine babe spreading sweet ass and luscious cunt.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\winxcfg.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\two large black bones in a small white box.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\tiny girl opening hole in crazy wish of cock.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\teen spreading in the kitchen.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\toying blonde with fucking machine.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\pornstar aria giovanni .mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\cock forced in some slut mouth.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\girls gone wild.mpg.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\Digimon.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\OfficeXP Keygen.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\bottle blonde tramp sucking a dick dry.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\closeups of horny slut serving up sweet hairy bush.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\babe with peach shape pussy that needs it bitten.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\shy teen draining the juice from 2 cocks.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\senior blonde fucking and suckin like a teen.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\drunk babes sharing a dick.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\cum hungry teen in action.mpg.pif 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\Jenna Jamison Dildo Humping.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\AIM Flooder.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe File created C:\Windows\SysWOW64\macromd\GTA3 crack.exe 1f96a1657a3e97223c8da1112d49eea6eafdfe0fc89eaaf6f5c961d405bbe986.exe