Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 19:10
Behavioral task
behavioral1
Sample
164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe
-
Size
81KB
-
MD5
a2325af85ccfb1a4f6c92128640c52e0
-
SHA1
f1c277e2f127a049edcbbb84a50236820b506420
-
SHA256
164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577
-
SHA512
136cda9ae7f992304f487e1cebe304f25755c9af2d7cd5b3b08954c938f7ee009006b339a50d9f47a0ae79f09417cf2d33af8cbd5be417689557ebc42d5615d7
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMS3dVWKTBJQnXKg5:5JjcF8KfCOcjk+guPVjS3CKTP+6I
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4952-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/4952-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\Cable Modem Uncapper.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\wife in kitchen preparing hot pussy for hubby's dinner.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\twin sisters tag teaming neighbors cock.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\winxcfg.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\OfficeXP Keygen.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\yummy lesbos licking.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\tiny girl opening hole in crazy wish of cock.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\action with three chicks getting it on with a guy.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\nasty teen posing in panties.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\redhead getting a group facial at a wild party.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\Pamela Anderson.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\15 year old on beach.mpg.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\Flash Golf.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\cute petite amateur girl spreading her snatch.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\horny teen waking up with her pink pussy spread.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\firm ass honie with thick lips made for sucking rods.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\nikki nova sex scene huge dick blowjob.mpg.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\password stealer.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\bad gal being tied and bound.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\dude getting off in lover's mouth at party.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\hot hungry sluts sucking cum for a line of coke.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\cute blonde cheerleader dancing.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\Another bang bus victim forced rape sex cum.mpg.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\Play Games Online For FREE.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\illegal preteen porn anal fisting.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\violent preteen gang bang illegal.mpg.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\babe with dick stuck between her ass cheeks.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\15 year old webcam.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\DivX pro key generator.exe 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\chicks working orgasm from dude's cock as a present.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\luscious babe with serious ass and firm titts.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\two interracial lesbians licking each other.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe File created C:\Windows\SysWOW64\macromd\babes with oversized hooters spreading.mpg.pif 164d4239b02061db6162b2968b915f2caad73fe55cd9ec1dcacf20ac33cb8577.exe