Analysis
-
max time kernel
44s -
max time network
50s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
29/10/2022, 21:21
Behavioral task
behavioral1
Sample
c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe
-
Size
76KB
-
MD5
a39626fe104d38f0a61f91bc31b1eca0
-
SHA1
8e77123178e226ddc6492093f03da07955dc9cff
-
SHA256
c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94
-
SHA512
aeeef9406790a221d13e24e9a1e113d835d1c7aa3c1a94dd77681408f55671b5b8103361e9364bd788a0918e301ffc4a826901995b26744fd91e1c2026370cc6
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMS+AX8O5+al:5JjcF8KfCOcjk+guPVjSn9Vl
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1196-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1196-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\aol password cracker.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\two teen lesbians with dildo having fun.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\bigger chunky girl with huge tits posing in the buff.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\hot girl on the beach sucking cock and fucking guy.mpg.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\Pamela Anderson And Tommy Lee Home Video (Part 1).mpg.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\invisible IP.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\tiny little virgin showing off her cherry pussy.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\tenderonie who insist her pussy must always be free.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\some fine amateur pussy shots from behind.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\fetish bondage preteen porno.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\hot babe getting pussy eaten by horny girlfriend.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\old fucker punishing teeny.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\Flash Golf.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\babes letting dudes assault their furballs.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\blonde showing her pussy to her neighbor.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\honie playing in her cunt with newly bought toy.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\gorgious babe who quit school to model pretty pink.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\senior blonde fucking and suckin like a teen.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\illgal incest preteen porn cum.mpg.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\anastasia nude.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\honies with incredibly delicious big boobs.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\hot hungry sluts sucking cum for a line of coke.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\first time anal and she loves it.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\asian girls stuffed mouth shots.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\winxcfg.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\maid's vagina plowed by big cock.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\Counter Strike CD Keygen.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\Two girls - Blonde and Brunette - Giving head.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\hotmail account sniffer.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\fine babe spreading extremely hot ass and furball.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\slutty cum babes sharing a dick.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\Xbox Iso 2 Rom Converter.exe c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe File created C:\Windows\SysWOW64\macromd\hot blonde teen sucking old dick.mpg.pif c08e117de5a90390c08fc2b71d7371d6f2e854cbe2dc19256e0d1bd692164f94.exe