Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 09:56
Behavioral task
behavioral1
Sample
fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe
-
Size
76KB
-
MD5
a301e53f71c513bc725813866ec11320
-
SHA1
7179e92f021628b904e692770b9e3794e462b5a1
-
SHA256
fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad
-
SHA512
f7c38d50133f350f9bc2f960c9a16233e459c8ae224c9fd766a6cad01119c3016f597bd590034028fbd55569fb6db9d3d5e6b4d1e9bdc75d6cbbe96e3e97db3d
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSz/9h7B2H:5JjcF8KfCOcjk+guPVjS/Y
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/448-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/448-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\teen tied up and raped.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\AIM Account Hacker.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\hot babe getting pussy eaten by horny girlfriend.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\sluty cock sucking chick.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\old man fucking young blonde teen.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\hot blonde fucking and sucking cum.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\Hotmail Hacker.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\luscious babe with serious ass and firm titts.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\some hard sucking and fucking babes.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\teen spreading in the kitchen.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\genuine indian slut posing.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\young teen slut with a huge cock in her mouth.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\3 teen blonde babes chin deep in pussy sauce.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\Counter Strike CD Keygen.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\cute blonde cheerleader dancing.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\honie displaying raw pink ass.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\blonde doing dildo outdoors.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\winxcfg.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\GTA 3 Serial.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\little brown cup-cake with plump boobs and sweet beaver.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\hotties sucking boobs and eating snatch in large bed.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\this really wild insane groupsex.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\horny asian warming her finger in her gash.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\win2k serial.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\couple babes getting off with well hung dude.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\Teen Violent Forced Gangbang.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\Windows 2000.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\slutty cum babes sharing a dick.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\aimhacker.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\violent preteen gang bang illegal.mpg.exe fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\sexy blonde teasing pussy.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\nasty teen posing in panties.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe File created C:\Windows\SysWOW64\macromd\cute young tart on a lucky dudes cum shooter.mpg.pif fa3a7e3d55b36c2d19c22c4cf1376731e05b92142cac4d5b6a2464fe54aaf3ad.exe