Find similar analyses in TI Lookup
Analysis date (UTC): 12 May 2021, 14:52Analysis environment: Windows 7 Pro, build 7601, x86

acer.exe

MD5:979692CD7FC638BEEA6E9D68C752F360
SHA1:C511AE4D80AAA281C610190AA13630DE61CA714C
SHA256:0A0C225F0E5EE941A79F2B7701F1285E4975A2859EB4D025D96D9E366E81ABB9

Analysis result

Threat level:Malicious activity
Tags:
trojanransomwaredarkside
Full analysis:Analysis acer.exe (MD5: 979692CD7FC638BEEA6E9D68C752F360) Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

Known privilege escalation attack

  • DllHost.exe (PID: 2108)

Renames files like Ransomware

  • acer.exe (PID: 2856)

SUSPICIOUS

Executed as Windows Service

  • acer.exe (PID: 2424)

Executed via COM

  • DllHost.exe (PID: 2108)

Creates files in the program directory

  • acer.exe (PID: 3628)

Application launched itself

  • acer.exe (PID: 3628)
  • acer.exe (PID: 2424)

Drops a file with a compile date too recent

  • acer.exe (PID: 2856)

Changes the desktop background image

  • acer.exe (PID: 3628)

Creates files like Ransomware instruction

  • acer.exe (PID: 2856)

INFO

Dropped object may contain TOR URL's

  • acer.exe (PID: 2856)

Threats

PIDProcessClassMessage
3628acer.exePotentially Bad TrafficET INFO TLS Handshake Failure
3628acer.exeA Network Trojan was detectedET TROJAN Observed DarkSide Ransomware Domain (baroquetees .com in TLS SNI)
3628acer.exeA Network Trojan was detectedET TROJAN Observed DarkSide Ransomware Domain (baroquetees .com in TLS SNI)
3628acer.exePotentially Bad TrafficET INFO TLS Handshake Failure
3628acer.exeA Network Trojan was detectedET TROJAN Observed DarkSide Ransomware Domain (baroquetees .com in TLS SNI)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN

© 2017-2026 ANY.RUN LLC. ALL RIGHTS RESERVED