File name: | Fixed-R2R.rar |
Full analysis: | https://app.any.run/tasks/649e637b-d835-407b-9061-9eee7efd1376 |
Verdict: | Malicious activity |
Analysis date: | May 30, 2020, 08:24:43 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/x-rar |
File info: | RAR archive data, v5 |
MD5: | 6149238DD5ED82D61E3DA929D1CE527B |
SHA1: | 3DC9A6DCFFBFF0F84292BFB724A5F4976434EA80 |
SHA256: | 1AEFE5C9298BCE5281A93DBC4182DF00A68D3FB93CA3B8509FA2B3A504B62A2C |
SSDEEP: | 12288:Yc9t2SllULgBqjW0PPdH5DVIXKGE6/gBQpoZmp2FTV0RY5wmm645ovw:YcLyLBW0VHpag2KZmp2F2Rd64x |
.rar | | | RAR compressed archive (v5.0) (61.5) |
---|---|---|
.rar | | | RAR compressed archive (gen) (38.4) |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2556 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\Fixed-R2R.rar" | C:\Program Files\WinRAR\WinRAR.exe | explorer.exe | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 | ||||
2692 | "C:\Users\admin\Desktop\REAPER_KeyGen.exe" | C:\Users\admin\Desktop\REAPER_KeyGen.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 3221226540 | ||||
3400 | "C:\Users\admin\Desktop\REAPER_KeyGen.exe" | C:\Users\admin\Desktop\REAPER_KeyGen.exe | explorer.exe | |
User: admin Integrity Level: HIGH | ||||
836 | C:\Users\admin\AppData\Local\Temp\keygen.exe | C:\Users\admin\AppData\Local\Temp\keygen.exe | — | REAPER_KeyGen.exe |
User: admin Integrity Level: HIGH |
PID | Process | Filename | Type | |
---|---|---|---|---|
2556 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2556.46895\R2R\R2R.txt | text | |
MD5:6E9731491C71080D0CA94C2259877765 | SHA256:9A80BF775EFB62EF52F06A275371BB17A60D0C1A71719F667E883BF49879BE1C | |||
3400 | REAPER_KeyGen.exe | C:\Users\admin\AppData\Local\Temp\bgm.xm | xm | |
MD5:D7BF06611A3EB46E6CAA92FA6E5F2103 | SHA256:C6D3769490A754C5D878E1DC5FC059CE04570C595B573F254C0903DB11DECDEE | |||
3400 | REAPER_KeyGen.exe | C:\Users\admin\AppData\Local\Temp\keygen.exe | executable | |
MD5:7867FFA49A15B1C1C98FA28F6F4915D5 | SHA256:11F7D1889F87BCDB136E2FFCD4D4DC6DADDFAEEE4C2D418585E11AEABF45AFA3 | |||
2556 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2556.46569\R2R\REAPER_KeyGen.exe | executable | |
MD5:FD5A3B2E2933EA1151D71F9CEFC9FBCF | SHA256:2A22BE4C7E3A17D6A408B0C0547CC181E148AB20C2E3F048791B421280686544 | |||
3400 | REAPER_KeyGen.exe | C:\Users\admin\AppData\Local\Temp\BASSMOD.dll | executable | |
MD5:E4EC57E8508C5C4040383EBE6D367928 | SHA256:8AD9E47693E292F381DA42DDC13724A3063040E51C26F4CA8E1F8E2F1DDD547F | |||
3400 | REAPER_KeyGen.exe | C:\Users\admin\AppData\Local\Temp\R2RRPRKG.dll | executable | |
MD5:42BD86289F5D56522D73F5B1D14A2300 | SHA256:F4004B3D39093BD1EA159C285B12C3A94ED110D48F29D4548F4FCB891E6C6530 |