Analysis
-
max time kernel
141s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 19:01
Behavioral task
behavioral1
Sample
a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe
-
Size
71KB
-
MD5
a0adc0aacdfede89dd753de4159d7e90
-
SHA1
9dfb01caf3b358cd200dd226cb1991df31865bac
-
SHA256
a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6
-
SHA512
5caf702fec5675f356b0bcab90703f72f99343b954f5940e3dee4c1b2f097271ccdb3536e06fb9794e22416ce9a8138d775486f7b6d3236e51154f09cf7fa491
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSfOk:5JjcF8KfCOcjk+guPVjSfV
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4596-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/4596-133-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/4596-134-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\both holes fucked by a massive fucking machin.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\fine babe spreading sweet ass and luscious cunt.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\winxcfg.exe a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\babes taking turns munching on hot beavers.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\dude getting burned out trying to fuck 2 hot babes.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\jenna jameson - xxx nurse scene.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\luscious babe with serious ass and firm titts.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\amateur slut fingering herself threw her wet panties.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\babe with dick stuck between her ass cheeks.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\hot anal sex for the first time ever.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\toying blonde with fucking machine.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\hot babe showing her pussy and wanting a stiff cock.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\babe enjoys juicy cumshot.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\msncracker.exe a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\porn account cracker.exe a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\horny teen waking up with her pink pussy spread.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\hot babes having too much fun at nude beach party.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\this really wild insane groupsex.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\sylvia lauren showing her assets.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\babe with peach shape pussy that needs it bitten.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\hot busty amateur babe stripping and spreading.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\candy stripper getting down on sick mans cock.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\fat grannies action.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\patricia arquette showing her tits.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\bottle blonde tramp sucking a dick dry.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\honies letting dudes flush mouths full of hot cum.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\teen taking off her panties outdoors.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\redhead in red lingerie ready to fuck.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\amateur babe showing pink.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\hot butt sex ..unbeliveable.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\15 year old webcam.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\little brown cup-cake with plump boobs and sweet beaver.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe File created C:\Windows\SysWOW64\macromd\mature show older pussy and happy to do it.mpg.pif a21949ec73c637a3469bafd53dcaf3d1f942b082c856df58d53cc9289fb851f6.exe