We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
27 May 2020, 14:56
Analysis environment:
Windows 7 Pro, build 7601, x86
mini.exe
MD5:
6FF252880FD34B21A775540E9F2174C0
SHA1:
16FDF8A0D14E22E84B8140F608631A2FB0C602FA
SHA256:
17A90E4E8E7625FBD9E230FF47B6D9FE0A764F384674D34B58B655A242E117DE
Analysis result
Threat level:
Malicious activity
Tags:
trickbot
Full analysis:
Analysis mini.exe (MD5: 6FF252880FD34B21A775540E9F2174C0) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
TRICKBOT was detected
mini.exe (PID: 960)
Known privilege escalation attack
DllHost.exe (PID: 3828)
SUSPICIOUS
Creates files in the user directory
mini.exe (PID: 960)
Executed via COM
DllHost.exe (PID: 3828)
Executable content was dropped or overwritten
mini.exe (PID: 960)
INFO
No info indicators.
Threats
No threats detected