File name: | start.bat |
Full analysis: | https://app.any.run/tasks/ffaeab0a-a36f-4ffa-be5c-ce95b21416eb |
Verdict: | Malicious activity |
Analysis date: | January 24, 2022, 19:47:01 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | text/plain |
File info: | ASCII text, with CRLF line terminators |
MD5: | 575B89E2EB5C80D7AE51723452C9BA13 |
SHA1: | 82D2DF40921EED7527D722F399E706E75744E5D7 |
SHA256: | 364D9F5E4CA10F394F38E041D6A8E071E7F0B969464F92AB0073720803822664 |
SSDEEP: | 6:6o+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+xo+o:f |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3016 | C:\Windows\system32\cmd.exe /c ""C:\Users\admin\AppData\Local\Temp\start.bat" " | C:\Windows\system32\cmd.exe | — | Explorer.EXE |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3212 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
2732 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3288 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3356 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3512 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
1780 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
364 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
1640 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3892 | C:\Windows\system32\cmd.exe /K start.bat | C:\Windows\system32\cmd.exe | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) |