Analysis
-
max time kernel
158s -
max time network
183s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03-10-2022 12:34
Behavioral task
behavioral1
Sample
e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe
-
Size
87KB
-
MD5
449838a1ba0e77211f4362e55cb05510
-
SHA1
6ab59d5734b1ac689e05847dec3e6439d9e451b0
-
SHA256
e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148
-
SHA512
2c7efa335a2aa5c0e3c7afb13670874ba710446d76693d5c91bd8d3aad5581bd52446931a7f1865cfea5c252f377b4db8acbc95723ef1d5f097654967dd8d436
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMShJ4RtFwiUIZxW/8Rk/EKDLQ:5JjcF8KfCOcjk+guPVjS0RmQWECsKY
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1580-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/1580-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\gay stud giving head and fucking.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\hotmailhacker.exe e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\trio having hardcore fucking fun.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\sweet ass blonde teen with dripping wet pussy.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\blonde in jeans undressing and teasing her snatch.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\MSN Flooder.exe e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\babe with peach shape pussy that needs it bitten.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\honie with a ka-boom hot ass and delicious cunt.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\cute teen with her hole spread wide open.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\nasty chick in hardcore fucking.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\cutie spreading her pussy lips.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\dirty sexy shemale posing nude.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\Britney Spears Dance Beat.exe e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\little brown cup-cake with plump boobs and sweet beaver.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\euro moma with big headlights and scrumptous ass.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\two studs gangbanging a hot little sluts holes.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\busty babe on a balcony.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\tiny teen showing her small titties.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\nasty slut sucking huge cock.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\aunt and nephew doing the nasty.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\mature show older pussy and happy to do it.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\ass ripping interracial fuckin.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\Website Hacker.exe e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\hot tomoli lathering up sexy body for boyfriend's tongue.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\bigger chunky girl with huge tits posing in the buff.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\both holes fucked by a massive fucking machin.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\asian studys how to strip.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\weird fetish drawings as chicks do it all.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\winxcfg.exe e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\16 year old webcam.mpg.exe e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\slutty cum babes sharing a dick.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\cute blonde cheerleader dancing.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe File created C:\Windows\SysWOW64\macromd\her taking a dildo right in the ass.mpg.pif e0020cb657f4096ec0aa34d1fa7bc39ec347a5188bca6011dfa29a5640064148.exe