Analysis
-
max time kernel
38s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
06/11/2022, 14:06
Static task
static1
Behavioral task
behavioral1
Sample
b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe
Resource
win7-20220901-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe
-
Size
1010KB
-
MD5
0ce6f24d3ea55483e12e5c85acdbe1b5
-
SHA1
b5c42a4511bb6a1d14ef60dbf4a3653252555736
-
SHA256
b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb
-
SHA512
83aed3413d14301ec5e1d3b0a26f5d7bb9fd2a14b3b00b37d1338c7f089a5bbfc0ae5a4a7a52d5d55d665db8196e2fb51e66e5a41c9e4d504cd2e4a1d1968135
-
SSDEEP
768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4f:tjrAX5NjJHJ+oFE2M/4f
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\VMIntel386 = "C:\\Windows\\Intelx386\\VMIntel386.exe 256mb 32bit" b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Silent Hill.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\GameCube Emulator.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\WinAmp skings and plugins.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\3D Movie Maker.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Puta come mierda.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\a pelo.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\humor.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Shinchan screen saver.scr b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Hentai Shizuka clit.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\VMIntel386.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\WinZip 9.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Hacha Profesional Edition.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\PSEmu.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\BsPlayer v3.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Visual Studio (full).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Follada brutal coño roto.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Winamp 3 (full version).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\mugen (full).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Sexo con una menor.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Dont Touch.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Chenoa en cueros.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Visual Basic 6.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Dont Download.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\DivX 7.2 freeware.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Matrix Wallpapers.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\German extreme violation.mpg.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\RealOne Player (Full version).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\RM2GBA.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Solo para Maricas.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Hentai.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\WinRar 4 (with crack).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\WAV2MP3.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Visual C.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\MSN messenger 6.3.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Resident Evil for GameCube.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\No lo Descargues.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\GBAEmu.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe b2ab8c5c73df24f8ee0ac4dcbef21a21f7efe49cd1389c1d660e0828c3d397bb.exe