Analysis
-
max time kernel
146s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07-11-2022 07:35
Behavioral task
behavioral1
Sample
478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe
-
Size
76KB
-
MD5
0ff2332684f222fe1466d80265428d8d
-
SHA1
b31e87e4eb24a96aa799ff8d31b4482cc2c1cf09
-
SHA256
478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69
-
SHA512
d5350fc0f29de60208afedc298bf12201655c8f31e821d6ea2c4f4e8e1c23ed6a2b61ad4c0b8885e3c626292a8a6459d3e6038e3f7171653ac32f7077d9a11f6
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSpO4AmCL3i9YYY8/x:5JjcF8KfCOcjk+guPVjSpXd19Y7m
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3044-132-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral2/memory/3044-133-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\luscious babe with serious ass and firm titts.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\honie playing in her cunt with newly bought toy.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\an older fat mom spreading wide.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\an asian bush getting a cum bath.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\some naughty toons fantasy.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\invisible IP.exe 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\Preteen Rape Sex Illegal - Jenny - 13 Years old.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\closeups of horny slut serving up sweet hairy bush.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\sexy hot looking horny ebony teens.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\prego housewifes large hole .mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\gay blades in the army.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\firm ass honie with thick lips made for sucking rods.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\cute blonde cheerleader dancing.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\teen taking off her panties outdoors.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\nice facial cumshot for slut.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\momma's juggs that make you scream for mercy.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\tight anal fucking like you want it.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\sexy hot teens gettin busy in shower.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\wild stud eating and drilling small pussy freek.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\aimcracker.exe 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\blonde with titts and cunt sending chills thru cock.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\hot girls who like cock but eat lots of pussy.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\pretty babe sucking cock on bed.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\blonde busty plumper in the nude.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\hardcored blonde mature.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\older blonde showing she has the goods.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\blonde doing dildo outdoors.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\two plain lonely looking lesbians.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\winxcfg.exe 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\old lady in bra and corset with dildo.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\fine babe spreading sweet ass and luscious cunt.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\swimmingpool threesome fuck suck group sucking.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe File created C:\Windows\SysWOW64\macromd\hot blonde fucking and sucking cum.mpg.pif 478ff855f69ef48aab102bb0510f11d50528edf7587255960a881eead0310f69.exe