We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
23 August 2024, 01:37
Analysis environment:
Windows 7 Pro, build 7601, x64
1257bdd9c0a8c6f2f36ae769b44d6930.exe
MD5:
1257BDD9C0A8C6F2F36AE769B44D6930
SHA1:
173C9ED35C32CE834D88D4EF0F771273846FC0D6
SHA256:
314E7ABC39A04EA35112BC087B45F6DD513DCA61D15078FCCFBDB412FA03E7C2
Analysis result
Threat level:
Malicious activity
Tags:
zombie
Full analysis:
Analysis 1257bdd9c0a8c6f2f36ae769b44d6930.exe (MD5: 1257BDD9C0A8C6F2F36AE769B44D6930) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
ZOMBIE has been detected (YARA)
1257bdd9c0a8c6f2f36ae769b44d6930.exe (PID: 1416)
SUSPICIOUS
Executable content was dropped or overwritten
1257bdd9c0a8c6f2f36ae769b44d6930.exe (PID: 1416)
Creates file in the systems drive root
1257bdd9c0a8c6f2f36ae769b44d6930.exe (PID: 1416)
Drops the executable file immediately after the start
1257bdd9c0a8c6f2f36ae769b44d6930.exe (PID: 1416)
INFO
Checks supported languages
1257bdd9c0a8c6f2f36ae769b44d6930.exe (PID: 1416)
Creates files or folders in the user directory
1257bdd9c0a8c6f2f36ae769b44d6930.exe (PID: 1416)
Threats
No threats detected