Analysis
-
max time kernel
144s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 09:19
Static task
static1
Behavioral task
behavioral1
Sample
b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe
Resource
win7-20220901-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe
Resource
win10v2004-20220812-en
2 signatures
150 seconds
General
-
Target
b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe
-
Size
1.4MB
-
MD5
f9bf1452703370da7adf8aa85ea703cb
-
SHA1
c64974c3976e9d7e3d608cb8045f91f91dd3c54f
-
SHA256
b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123
-
SHA512
d42bb83d38c02afb130006f1d8cf422649df97c788b2db36d4ff04d35c6cb8b9ded6596e0d38e8cbaed92e754ee47439d7ab90d8a5995ed472d90d0f8f69e487
-
SSDEEP
768:tks+cAXJpB2TgpZnjJHk/OxJ+oFEZEM/4l:tjrAX5NjJHJ+oFE2M/4l
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\VMIntel386 = "C:\\Windows\\Intelx386\\VMIntel386.exe 256mb 32bit" b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe -
Drops file in Windows directory 64 IoCs
description ioc Process File created C:\Windows\Intelx386\Puta come mierda.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\No lo Descargues.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Pack sex very hot nude young girl porn erotic private pussy rape clitoris suck chicas fotos culos tetas coños mamadas corridas sister hermana amigas friends lesbianas mujeres desnudas putas guarras hentai.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\WinAce 3.85 (with Serial).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Mazinkaiser comics pack.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\GameCube Emulator.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Sexo con una menor.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Capitulos ineditos de DragonBall Z jamas emitidos.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Solo para Maricas.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Silent Hill.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Lolita Pack 20 Pics.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\VMIntel386.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\DivX 7.2 freeware.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Hacha Profesional Edition.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\mugen (full).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Fuck my fat ass.avi.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Follada brutal coño roto.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\VirtualDub 2.1.4.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Nero 7.5.1.0 (cracked!).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\GBAEmu.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Visual Basic 6.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Pack Photoshop CS 8 plugins.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\humor.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Winamp 3 (full version).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\ContaWin 2000 (full version).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\3D Studio R8 (It's Work!!).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Simpsons pack guiones (Temporada 2004).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\3D Movie Maker.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Resident Evil for GameCube.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\RM2GBA.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Pack 50 Juegos PS2.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Terminator 3 Wallpapers.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Hentai Evangelion Poker.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\BsPlayer v3.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Pedofilia pack 37 pics.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Dont Touch.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\FlashGet Max acceleration (Experimental).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Pack 25 Juegos GameCube.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Matrix Wallpapers.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Chenoa en cueros.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Update Photoshop 7.0 to Photoshop 9.16 (It´s Work!).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\WinRar v6.11 (with crack).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Juegos JAVA para NOKIA.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\WAV2MP3.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Update Photoshop 8.0 to Photoshop 9.5 (It´s Work!).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\RealOne Player (Full version).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\WinAmp skings and plugins.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\WinZip 9.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\PSEmu.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Hentai Shizuka clit.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\a pelo.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Download Accelerator Plus (DAP) (full version with serial).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\WinRar 4 (with crack).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Visual C.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Hentai.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Visual Studio (full).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Dont Download.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Winamp 5.0 (full version).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Winamp 3.5 (full version).exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\MSN messenger 6.3.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Mazinkaiser pack fondos de escritorio.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Pack Tonos y Logos para Nokia.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\German extreme violation.mpg.exe b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe File created C:\Windows\Intelx386\Shinchan screen saver.scr b942496d9713d7359720ce10dd5842fe3dd22c0f7352cf1a5b122e908b779123.exe