File name: | start.bat |
Full analysis: | https://app.any.run/tasks/68186364-1869-4cdc-92ea-86baceb33ec4 |
Verdict: | Malicious activity |
Analysis date: | January 25, 2022, 00:09:05 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | text/plain |
File info: | ASCII text, with CRLF line terminators |
MD5: | 575B89E2EB5C80D7AE51723452C9BA13 |
SHA1: | 82D2DF40921EED7527D722F399E706E75744E5D7 |
SHA256: | 364D9F5E4CA10F394F38E041D6A8E071E7F0B969464F92AB0073720803822664 |
SSDEEP: | 6:6o+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+o:f |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3816 | C:\Windows\system32\cmd.exe /c ""C:\Users\admin\AppData\Local\Temp\start.bat" " | C:\Windows\system32\cmd.exe | — | Explorer.EXE |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
2376 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
2944 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3608 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3364 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3216 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
1948 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
2360 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3116 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3452 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) |