Analysis
-
max time kernel
39s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
19/10/2022, 19:01
Behavioral task
behavioral1
Sample
9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe
-
Size
91KB
-
MD5
a0cf9aa8a15cfb7a977725196e218b40
-
SHA1
83279ab15bddc80cd37d8816c504bee89bda0cf2
-
SHA256
9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a
-
SHA512
67994edd346bfbf24afd320d69b7d6b31a6216cdde6f307d8d628ca07a01f1ee98bee77e66871264450561b1ffd26bfd780a38054936951168f7b49bb1c2b65c
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSrqObliFkiDU9Or63nouKILD:5JjcF8KfCOcjk+guPVjSrqu8FpDU9OuX
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1016-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1016-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\divx pro.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\preteen sucking huge cock illegal.mpg.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\honie with a ka-boom hot ass and delicious cunt.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\hot blonde teen sucking old dick.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\play station emulator crack.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\chubby girl bukkake gang banged sucking cock.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\invisible IP.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\senior blonde fucking and suckin like a teen.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\beautiful blonde gettin an anal fucking.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\winxcfg.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\GTA 3 Crack.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\Jenna Jameson Nude Gang Bang Forced Cum Blowjob.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\babe celebrating new years naked and spreading cunt.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\hot babe getting pussy eaten by horny girlfriend.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\sexy hot teens gettin busy in shower.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\cute girl giving head.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\dedicated honie giving dude a helping hand and head.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\old fucker punishing teeny.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\an older fat mom spreading wide.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\hot anal sex for the first time ever.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\win2k serial.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\hot hungry sluts sucking cum for a line of coke.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\horny teen waking up with her pink pussy spread.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\hot babe showing her pussy and wanting a stiff cock.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\jenna jameson - shower scene.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\Norton antivirus 2002.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\hotties sucking boobs and eating snatch in large bed.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\bad gal being tied and bound.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\krystal steal getting her bald clam filled.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\sluts who are in control of their slaves.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\pamela anderson naked.mpg.exe 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\honies letting dudes flush mouths full of hot cum.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe File created C:\Windows\SysWOW64\macromd\two interracial lesbians licking each other.mpg.pif 9c0a5c7290ddc55ced075d897710396aba6cb2b64c5a5bffaf5e600a79a5ec3a.exe