File name: | chicken_2_better.bat |
Full analysis: | https://app.any.run/tasks/07b8210f-0905-4283-837e-0851d1e4b2ad |
Verdict: | Malicious activity |
Analysis date: | November 29, 2020, 16:22:10 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | text/x-msdos-batch |
File info: | DOS batch file, UTF-8 Unicode text, with CRLF line terminators |
MD5: | BC2E5305708D2380C84D10EEAF5C86C3 |
SHA1: | 7A4ACC804D9B48A63EE462368AA4DADB3846A805 |
SHA256: | 4D56018213E932184CA663CA2B32668BC6303497BE2D7AC991100A8EF48FBB58 |
SSDEEP: | 12:wIfd+6gurWxL3W8d6bDWs3fWyOWrEJfmW7MWaWYkG4AYSr20GsXE6Bd:bgu8S/KSE9mCMWa7kG4AYSAs06L |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2628 | cmd /c ""C:\Users\admin\AppData\Local\Temp\chicken_2_better.bat" " | C:\Windows\system32\cmd.exe | — | explorer.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Exit code: 3221225786 Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
3276 | ping localhost -n 4 | C:\Windows\system32\PING.EXE | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: TCP/IP Ping Command Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) | ||||
1764 | ping localhost -n 4 | C:\Windows\system32\PING.EXE | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: TCP/IP Ping Command Exit code: 3221225786 Version: 6.1.7600.16385 (win7_rtm.090713-1255) | ||||
3560 | "C:\Windows\explorer.exe" | C:\Windows\explorer.exe | — | explorer.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Explorer Exit code: 1 Version: 6.1.7600.16385 (win7_rtm.090713-1255) | ||||
3084 | "C:\Windows\System32\NOTEPAD.EXE" C:\Users\admin\Desktop\chicken_2_better.bat | C:\Windows\System32\NOTEPAD.EXE | — | explorer.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Notepad Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) | ||||
2328 | cmd /c ""C:\Users\admin\Desktop\chicken_2_better.bat" " | C:\Windows\system32\cmd.exe | — | explorer.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Exit code: 1 Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) | ||||
2908 | ping localhost -n 4 | C:\Windows\system32\PING.EXE | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: TCP/IP Ping Command Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) | ||||
3948 | ping localhost -n 4 | C:\Windows\system32\PING.EXE | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: TCP/IP Ping Command Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) | ||||
3980 | ping localhost -n 4 | C:\Windows\system32\PING.EXE | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: TCP/IP Ping Command Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) | ||||
2844 | ping localhost -n 3 | C:\Windows\system32\PING.EXE | — | cmd.exe |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: TCP/IP Ping Command Exit code: 0 Version: 6.1.7600.16385 (win7_rtm.090713-1255) |
PID | Process | Filename | Type | |
---|---|---|---|---|
3084 | NOTEPAD.EXE | C:\Users\admin\Desktop\chicken_2_better.bat | text | |
MD5:F0D2A004B1909C02A94E4B921E5B6C55 | SHA256:E28E00377C5780A01FF27004CB9BEC009699210517C188EED19AB936043FC487 |