Analysis
-
max time kernel
97s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-10-2022 10:05
Behavioral task
behavioral1
Sample
12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe
-
Size
75KB
-
MD5
92dbc1709869a24b84b124acaf5c7f48
-
SHA1
864cfc63314ade8f00a182e8219d299b28b7c209
-
SHA256
12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082
-
SHA512
c4561c70cc54ad5cff75acde2109623409d20ff9fd4092572d95014291853f8913ec908d4f8e82747cb04df1bac6caaac794c6f3e3e06a4c89f6f4761f52ffce
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSbgVEQ9Y9S:5JjcF8KfCOcjk+guPVjSbKE19S
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4952-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/4952-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\mature show older pussy and happy to do it.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\virtua girl - adriana.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\15 year old on beach.mpg.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\sister and brother gettin' freaky .mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\amateur swinger babe sucking on a couple of cocks.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\nice girl showing her tits for extra money.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\asian girls stuffed mouth shots.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\fat grannies action.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\wild stud eating and drilling small pussy freek.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\Jenna Jamison Dildo Humping.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\Digimon.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\Free Porn.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\ebony spreading her pink wet pussy.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\busty ebony girl showing shaved pus.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\Another bang bus victim forced rape sex cum.mpg.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\16 year old on beach.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\hot anal sex for the first time ever.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\pornstar aria giovanni .mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\winxcfg.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\Website Hacker.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\brutal preteen porn xxx.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\Napster Clone.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\Nokia Unloker (most models).exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\little chicken shy about exposing sweet cunt.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\chicks working orgasm from dude's cock as a present.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\honie with thick ass spreading her money maker.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\kitty-cat with horny beaver that needs licking.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\drunk babes sharing a dick.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\sylvia lauren showing her assets.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\asian slut with puffy exotic lips.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\GTA3 crack.exe 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\3 teen blonde babes chin deep in pussy sauce.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe File created C:\Windows\SysWOW64\macromd\cute teen with her hole spread wide open.mpg.pif 12e1642104570f1240e43b229a56dd85b854de9a89355528c648500599f02082.exe