File name: | clients_version2569.zip |
Full analysis: | https://app.any.run/tasks/5baa34df-a375-4195-b8e2-3a39c7e63331 |
Verdict: | Malicious activity |
Analysis date: | December 14, 2018, 12:25:28 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/zip |
File info: | Zip archive data, at least v2.0 to extract |
MD5: | D8EA6C15AFDDA67338278ADC1AD20EBE |
SHA1: | 1C9C4D6252A3A389F1DD7D8CD07697F7E5CFB4AE |
SHA256: | 0565613B920886DCB508063CC0811E5C1A7447F89525F7F9D3896F9EE6465FD4 |
SSDEEP: | 98304:D0HIHSZ5/GeuSfCVvw4Jx0WMDY2OLkj1dOCY0uu72Cn6nBI93Qh:DYI6/NFmTJ5MDYPwjRnOOOh |
.zip | | | ZIP compressed archive (100) |
---|
ZipFileName: | bigpackets.com is pass |
---|---|
ZipUncompressedSize: | 12 |
ZipCompressedSize: | 12 |
ZipCRC: | 0x00000000 |
ZipModifyDate: | 2018:07:25 02:56:01 |
ZipCompression: | None |
ZipBitFlag: | 0x0001 |
ZipRequiredVersion: | 20 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2968 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\clients_version2569.zip" | C:\Program Files\WinRAR\WinRAR.exe | explorer.exe | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 | ||||
3120 | "C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe" | C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 3221226540 | ||||
3376 | "C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe" | C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 | ||||
2672 | "C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe" | C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 3221226540 | ||||
2660 | "C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe" | C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 | ||||
3544 | "C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe" | C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 3221226540 | ||||
3536 | "C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe" | C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
2968 | WinRAR.exe | C:\Users\admin\Desktop\big\Client_2569_64bitGamesOnly.exe | executable | |
MD5:361681545930E7678AC7E39A16526F24 | SHA256:D1A1A758C1FDB3AAC4FF87B486406C28788111DFDE5828ABBA20B2AAAE30D572 | |||
2968 | WinRAR.exe | C:\Users\admin\Desktop\big\Client_2569_32bitGamesOnly.exe | executable | |
MD5:6FF6F119203473A1D824C59C95FD0B4A | SHA256:FB097A77E05255218A454A502BF64D8DAD4E58C9B549CA33CE33ECC2BBA7760C | |||
2968 | WinRAR.exe | C:\Users\admin\Desktop\big\Read Me NOW.txt | text | |
MD5:622C5BCDC8284F14AA2F79B50D38CDD1 | SHA256:5EA09E8622C6B964D096B3C2424AE07DC91A47C28C71F17CD8345B71DA3F8A29 |
Process | Message |
---|---|
Client_2569_32bitGamesOnly.exe |
%s------------------------------------------------
--- Themida Professional ---
--- (c)2012 Oreans Technologies ---
------------------------------------------------
|
Client_2569_32bitGamesOnly.exe |
%s------------------------------------------------
--- Themida Professional ---
--- (c)2012 Oreans Technologies ---
------------------------------------------------
|
Client_2569_32bitGamesOnly.exe |
%s------------------------------------------------
--- Themida Professional ---
--- (c)2012 Oreans Technologies ---
------------------------------------------------
|