Analysis
-
max time kernel
42s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
30-10-2022 10:03
Static task
static1
Behavioral task
behavioral1
Sample
5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe
-
Size
154KB
-
MD5
a31acba45440f44edef7fc709b186b80
-
SHA1
8bfaa2c0689c0ea666fd514ae6ba484422a5687a
-
SHA256
5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f
-
SHA512
056963c56f42dc244b92bb7a952a6a33fecc2c898d6e33393613c98ff499e3c59ea9b818e1db418107618f9462e3a7f481bcee03d394ced2944325ce48a79735
-
SSDEEP
3072:jmVW8iTX/3RfldjjXq1+0cxxsWEL02fXcIp08MoecBrXKbG4D/o0:aM7jJlRexYTHYZMcBTGGk/o0
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\cool rooster raiding hen house for hot babes, link city.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\3 teen blonde babes chin deep in pussy sauce.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\sister and brother gettin' freaky .mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\chunky broad with a hairy well used ass.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\hot actress heather graham naked.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\cock forced in some slut mouth.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\pamela anderson nude.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\candy stripper getting down on sick mans cock.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\chick weeing in her pants.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\cute young tart on a lucky dudes cum shooter.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\teen tied up and raped.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\Warcraft 3 battle.net serial generator.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\asian slut with puffy exotic lips.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\winxcfg.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\Hotmail Hacker.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\hotmailhacker.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\MSN.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\horny teen waking up with her pink pussy spread.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\Britney spears nude.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\aol password cracker.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\plump brunette using her finger.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\slutty japanese babe giving blowjob.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\fistfucking and how ide it goes.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\prego housewifes large hole .mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\trailor tramp pissing for you.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\Nokia Unloker (most models).exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\amateur orgy at a swinger party.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\little chicken shy about exposing sweet cunt.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\stud fucking his blonde french maid.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\hot japanese office sex.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\Microsoft Office XP (english) key generator.exe 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\hot butt sex ..unbeliveable.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe File created C:\Windows\SysWOW64\macromd\dude getting burned out trying to fuck 2 hot babes.mpg.pif 5af9ee26ccfa1f3652d1a8bcb3f1e2ae0c9b60e0e2d5b46447ed9c7f944de35f.exe