Analysis
-
max time kernel
37s -
max time network
41s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
28/11/2022, 04:15
Behavioral task
behavioral1
Sample
0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe
Resource
win7-20220812-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe
-
Size
88KB
-
MD5
a95e5152e48e411bf01b1445c9bd9812
-
SHA1
c59890835a15ef1bdcacf0f29f0413535a66c1be
-
SHA256
0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10
-
SHA512
6108875e983fd534517e8375c667514b974ffee7b132b8698b7afc6dec3d8705d6d7e02191405b97584e1be5093fc36c165d48dfc073cccb868b521b3dfb8dac
-
SSDEEP
1536:5lrsicagdzn8K2ariPOcjk+XQuPVN72NMSfAPsrDhPw6bCHpC3W:5JjcF8KfCOcjk+guPVjSoSa8qpCG
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1976-54-0x0000000000400000-0x0000000000467000-memory.dmp upx behavioral1/memory/1976-55-0x0000000000400000-0x0000000000467000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\winxcfg.exe = "C:\\Windows\\system32\\winxcfg.exe" 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe -
Drops file in System32 directory 33 IoCs
description ioc Process File created C:\Windows\SysWOW64\macromd\Jenna Jameson Nude Gang Bang Forced Cum Blowjob.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\luscious babe with serious ass and firm titts.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\babe locking lips around her man's rod in backyard.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\asian slut with puffy exotic lips.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\msncracker.exe 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\dude getting off in lover's mouth at party.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\babes letting dudes assault their furballs.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\babes with an assortment of delicious big juggs.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\blonde beauty ass fucked.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\AIM Password Stealer.exe 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\chicks working orgasm from dude's cock as a present.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\busty asian babe with a hairy box.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\kitty-cat with horny beaver that needs licking.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\tight anal fucking like you want it.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\bigger chunky girl with huge tits posing in the buff.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\sexy hot teens gettin busy in shower.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\hot blonde teen sucking old dick.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\AOL.exe 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\young slut being pound in all her tight holes.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\sexy ass black slut sucking huge cock.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\an older fat mom spreading wide.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\swimmingpool threesome fuck suck group sucking.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\kinky banana in pussy.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\Britney spears nude.exe 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\cool rooster raiding hen house for hot babes, link city.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\AIM Account Hacker.exe 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\hotties sucking boobs and eating snatch in large bed.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\career girls playing with their snatch after work.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\candy stripper getting down on sick mans cock.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\asian studys how to strip.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\charlize theron naked.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\winxcfg.exe 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe File created C:\Windows\SysWOW64\macromd\jenna jameson - xxx nurse scene.mpg.pif 0c4d4dd0918f94a5513287e2dc9e78ce033e41d2cdf19c29e13b6a563a1efd10.exe