Analysis
-
max time kernel
146s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2022 07:30
Static task
static1
Behavioral task
behavioral1
Sample
2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe
-
Size
441KB
-
MD5
77c0ea6838bd18baf181b8d6d8d26310
-
SHA1
a389548f3bf0de22bf89e28c6486d1913f5629e1
-
SHA256
2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd
-
SHA512
9a79413451d859ebf5f2e41ca01db34398e94d05649dadd50866dad0a9d236f1abb2437e5b9b563bf2ae890d7d82a2c34b77c107ec1fa360e373f4c4d50123fd
-
SSDEEP
3072:jmVW8iTX/3RfldjjXq1+0cxxsWEL02fXcIp08MoepIJOFC1zPc2YufwO60Xq1+0u:aM7jJlRexYTHYZMpyONuYbxYTHYZM12
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\lezbos in pantyhose swapping tongues.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\16 year old on beach.exe 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\preteen sucking huge cock illegal.mpg.exe 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\gangbang tryout with young slut and two studs.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\Britney spears nude.exe 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\sexy ass black slut sucking huge cock.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\hard cock cumming in her mouth.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\naturaly tan babe with gorgous body.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\two large black bones in a small white box.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\two teen lesbians with dildo having fun.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\huge titty blonde taking in a full 12 inch cock.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\stud fucking his blonde french maid.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\kinky banana in pussy.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\winxcfg.exe 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\illegal porno - 15 year old raped by two men on boat.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\Two girls - Blonde and Brunette - Giving head.exe 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\ebony girl with massive hooters.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\sexy fucked tranny babe.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\hot shemale stripping bare.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\supermodel nina brosh .mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\two plain lonely looking lesbians.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\nice ass penetration and suck.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\luscious babe with serious ass and firm titts.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\amateur slut with a huge gun.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\brazilian supermodel adriana lima.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\chick weeing in her pants.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\celeb's toes being suck by body-guard.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\honie displaying raw pink ass.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\robin throating and fucking.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\nice facial cumshot for slut.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\hotties sucking boobs and eating snatch in large bed.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\honie with a ka-boom hot ass and delicious cunt.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe File created C:\Windows\SysWOW64\macromd\tiny girl opening hole in crazy wish of cock.mpg.pif 2895dcaf6f55483d299235d2b138d2c12d6a986f74db11f3c7de3b8c01e2f2bd.exe