Analysis
-
max time kernel
33s -
max time network
39s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
19-10-2022 19:01
Behavioral task
behavioral1
Sample
a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe
-
Size
73KB
-
MD5
a22f6d5e5f6944171391f9d2c20c7c40
-
SHA1
bfe7da5911720dd3611c5948179baa357ddbcb3a
-
SHA256
a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99
-
SHA512
2220850e466077b16a425a7a6d860d5755962421c38a64707502f861d9a599cde56f8d73db496d4bf84100a40dce90a5336889768e7033328696d54c2b8b3e98
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSQY5l/hntIvj:5JjcF8KfCOcjk+guPVjSjIj
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1488-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1488-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\extremely fine hoine with incredible sweet twat.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\honie displaying raw pink ass.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\fine babe spreading sweet ass and luscious cunt.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\Blonde and Japanese girl bukkake.mpg.exe a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\AIM Account Stealer.exe a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\babe celebrating new years naked and spreading cunt.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\kitty-cat with horny beaver that needs licking.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\cute blonde cheerleader dancing.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\happy babe who got 12 inches last night.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\gorgious hotties who stimulated over worked rods.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\babes with great lips that knows how suck cock.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\fine babe spreading extremely hot ass and furball.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\two studs gangbanging a hot little sluts holes.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\teen taking off her panties outdoors.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\2 horny babes doing 1 lucky dude.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\winxcfg.exe a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\ebony girl with massive hooters.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\Britney spears nude.exe a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\Grand theft auto 3 CD1 crack.exe a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\asian girls stuffed mouth shots.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\sister and brother gettin' freaky .mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\old fucker punishing teeny.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\Preteen Rape Sex Illegal - Jenny - 13 Years old.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\movie of mom who whip hot ass on daughter's big cock lover.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\horny housewife looking for some action.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\toying blonde with fucking machine.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\cum hungry teen in action.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\16 year old webcam.mpg.exe a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\chubby girl bukkake gang banged sucking cock.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\robin throating and fucking.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\ICQ Hackingtools.exe a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\career girls playing with their snatch after work.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe File created C:\Windows\SysWOW64\macromd\two studs fucking the hell out of a slut from behind.mpg.pif a35e4dcc06d22e167984900d0787cc8fab5138fef2bf5c5437b3eb41b19f3b99.exe