Analysis
-
max time kernel
48s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
19/10/2022, 19:04
Behavioral task
behavioral1
Sample
75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe
-
Size
75KB
-
MD5
a0ad7262bf223bb2ba1d1a9a30892690
-
SHA1
ec85dd3ce3f1b994b5017515d1cf4ff59e6eeb12
-
SHA256
75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774
-
SHA512
276588774d97ee27bee313788a56149993281611b85cc8252fdfb02bf6db53a7bfadd266d580ee50ef9251af1ad8ce56cd3dda51b358e94f657bfd70eb3c6736
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSYu4yxJzE/D9FF:5JjcF8KfCOcjk+guPVjStvEl
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1268-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1268-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\hot actress heather graham naked.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\babe enjoys juicy cumshot.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\glamour babe in black stockings.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\wild hoe showing spreading the pink.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\teen tied up and raped.exe 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\sexy amatures sucking whole bag.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\two teenie boppers learning to eat pussy.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\naturaly tan babe with gorgous body.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\warcraft 3 crack.exe 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\sunbathing beauties tanning tender pussy lips.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\babes with oversized hooters spreading.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\babes getting their tender little asses corked.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\spying on gals in toilet.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\jenna jameson sex scene huge dick blowjob.scr 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\twin sisters tag teaming neighbors cock.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\first time anal and she loves it.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\showing some hot girls share cock.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\lusty teen peeing in backyard.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\chicks eating hot meaty pussy.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\winxcfg.exe 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\babe locking lips around her man's rod in backyard.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\AIM Flooder.exe 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\amateur getting off in the mirror.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\16 year old on beach.exe 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\porn account cracker.exe 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\her taking a dildo right in the ass.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\drunk babes sharing a dick.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\asian slut with puffy exotic lips.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\AOL, MSN, Yahoo mail password stealer.exe 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\Warcraft 3 battle.net serial generator.exe 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\tenderonie who insist her pussy must always be free.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\chubby girl fucked from all angles xxx.exe 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe File created C:\Windows\SysWOW64\macromd\couple babes getting off with well hung dude.mpg.pif 75804c76f934ecdad52f9a842b790d62c0d8c466f2b4a401080f6746f8764774.exe