Analysis
-
max time kernel
34s -
max time network
116s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 19:03
Behavioral task
behavioral1
Sample
85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe
-
Size
87KB
-
MD5
a18b7450b7c55ab2ccfa9ddc6a588020
-
SHA1
9a73b02c04039151bfc039aedff6de22b3073aff
-
SHA256
85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152
-
SHA512
12bcf1f2a347f66ade32c6665182eb3d30a01444a2fb63840183d7916bef1a7cb1765cfb3b72b476b67c6d4983e4571becaca25c60d7b9e76e5971f0376286f7
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSv6u6CUQLgAtoSaWteeLcWhXtQFk:5JjcF8KfCOcjk+guPVjSv+14g4zeeLbJ
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2276-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/2276-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\chubby girl fucked from all angles xxx.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\Nokia Unloker (most models).exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\extremely fine hoine with incredible sweet twat.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\chunky broad with a hairy well used ass.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\swimmingpool threesome fuck suck group sucking.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\preteen snuff sex rape with a stick hardcore.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\15 year old on beach.mpg.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\aol password cracker.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\Two girls - Blonde and Brunette - Giving head.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\horny ass licking lesbians.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\Napster Clone.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\virtua girl - bailey short skirt.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\cute blonde cheerleader dancing.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\hot tomoli lathering up sexy body for boyfriend's tongue.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\strange asian ass odyssey.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\teen tied up and raped.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\MSN Flooder.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\violent preteen gang bang illegal.mpg.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\fun slut who let dude eat her off in jacuzzi.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\babes getting big cocks off with lips.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\hotmail account sniffer.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\illegal preteen porn anal fisting.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\euro moma with big headlights and scrumptous ass.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\two large black bones in a small white box.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\sexy blonde teasing pussy.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\winxcfg.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\gangbang tryout with young slut and two studs.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\hot hungry sluts sucking cum for a line of coke.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\two teen lesbians with dildo having fun.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\redhead getting a group facial at a wild party.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\AIM Account Hacker.exe 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\honie displaying raw pink ass.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe File created C:\Windows\SysWOW64\macromd\hard 3 way fuck in car shop.mpg.pif 85a044ea8840e45d1bde5d21372418deff80c90f6b8cdcfbb5995715cae98152.exe