Analysis
-
max time kernel
87s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 10:06
Behavioral task
behavioral1
Sample
04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe
-
Size
96KB
-
MD5
a2a44990fda628955327d28e7d14db20
-
SHA1
92b2e42504dfe827bb9a2d31785b4c1e9a4aff8b
-
SHA256
04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638
-
SHA512
640e78c5fcb43d31bf0ccf41a80d6d130596ae92ee45b7d97aa0d1b4591385f0038ca4cf110b2c33cbc2d723543da1545877bf64b2957b68f41f6395ef005535
-
SSDEEP
3072:5JjcF8KfCOcjk+guPVjS2XU1ob1Nex5+cLc:5Jonkkxud5kiPexU
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4468-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/4468-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\aol password cracker.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\aimhacker.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\babe leading pussy-whipped stud around by her cunt.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\babes with an assortment of delicious big juggs.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\virtua girl - adriana.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\Xbox Iso 2 Rom Converter.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\sexy ass black slut sucking huge cock.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\aimcracker.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\winxcfg.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\Digimon.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\pamela anderson nude.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\sweet ass blonde teen with dripping wet pussy.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\chubby girl fucked from all angles xxx.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\violent preteen gang bang illegal.mpg.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\babes letting dudes assault their furballs.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\hot girls who like cock but eat lots of pussy.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\dude getting burned out trying to fuck 2 hot babes.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\old lady in bra and corset with dildo.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\tiny girl opening hole in crazy wish of cock.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\trio having hardcore fucking fun.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\DivX pro key generator.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\Lolita preteen sex.mpeg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\preteen snuff sex rape with a stick hardcore.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\Jenna Jameson Nude Gang Bang Forced Cum Blowjob.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\gorgious hotties who stimulated over worked rods.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\amateur orgy at a swinger party.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\sluts who are in control of their slaves.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\Grand theft auto 3 CD1 crack.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\Microsoft Office XP (english) key generator.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\chubby girl bukkake gang banged sucking cock.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\Free Porn.exe 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\babe with peach shape pussy that needs it bitten.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe File created C:\Windows\SysWOW64\macromd\two interracial lesbians licking each other.mpg.pif 04000e6598c8cac2c5aae72a57efc3ba81a188b86836e7541e8bc1966508a638.exe