Analysis
-
max time kernel
93s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 19:07
Behavioral task
behavioral1
Sample
431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe
-
Size
83KB
-
MD5
a0ccf38cd216302f9f3c79af20d618a0
-
SHA1
41ddfd714ef3985ec1b5cd162ce300175bd6c0c8
-
SHA256
431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9
-
SHA512
cd507e0f22edb08f69a8e0b5bc020f091c1eea9be8538e0f5378525d71b45073db35d3145b84bc237e69d24b213b4acf34287c39916c60e1431a9cad43cdcde8
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSPDUVLyoTTsgwr:5JjcF8KfCOcjk+guPVjSPDUVW5
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5012-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/5012-133-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/5012-134-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\winxcfg.exe 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\brunette fucking in bedroom with boyfriend.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\cutie nailed up the ass.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\first time anal and she loves it.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\busty asian babe with a hairy box.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\black girl gets dildo wet.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\two teenie boppers learning to eat pussy.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\pamela anderson nude.exe 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\blonde with titts and cunt sending chills thru cock.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\babe with dick stuck between her ass cheeks.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\honies with incredibly delicious big boobs.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\sexy ass black slut sucking huge cock.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\extremely fine hoine with incredible sweet twat.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\huge titty blonde taking in a full 12 inch cock.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\two studs gangbanging a hot little sluts holes.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\Grand theft auto 3 CD1 crack.exe 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\Windows 2000.exe 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\brutal preteen porn xxx.exe 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\babe with peach shape pussy that needs it bitten.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\busty ebony girl showing shaved pus.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\Lolita preteen sex.mpeg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\Microsoft Office XP (english) key generator.exe 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\wild ebony slut taking two cocks.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\old man fucking young blonde teen.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\maid's vagina plowed by big cock.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\two busty sluts fucked in bathroom.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\jenna jameson sex scene huge dick blowjob.scr 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\cute honie spreading flawless ass and juicy twat.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\sluts who are in control of their slaves.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\blonde beauty ass fucked.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\stud fucking his blonde french maid.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\this really wild insane groupsex.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe File created C:\Windows\SysWOW64\macromd\sexy pink pussy girl taking it off.mpg.pif 431c8a75acff664dd0539879ca1c646a0fb161437f4a95c5940cbc31cbe45cd9.exe