File name: | start.bat |
Full analysis: | https://app.any.run/tasks/b32181a7-21fb-4c95-a48b-0600c689721b |
Verdict: | Malicious activity |
Analysis date: | January 24, 2022, 20:38:17 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | text/plain |
File info: | ASCII text, with CRLF line terminators |
MD5: | 575B89E2EB5C80D7AE51723452C9BA13 |
SHA1: | 82D2DF40921EED7527D722F399E706E75744E5D7 |
SHA256: | 364D9F5E4CA10F394F38E041D6A8E071E7F0B969464F92AB0073720803822664 |
SSDEEP: | 6:6o+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+o:f |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3148 | C:\Windows\system32\cmd.exe /c ""C:\Users\admin\AppData\Local\Temp\start.bat" " | C:\Windows\system32\cmd.exe | — | Explorer.EXE |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3856 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
672 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3096 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
2292 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
1748 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
2328 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3172 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
2244 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3780 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) |