Find similar analyses in TI Lookup

Analysis date (UTC): 16 February 2019, 17:02Analysis environment: Windows 7 Pro, build 7601, x86

https://zzb.bz/D7cKF

MD5:91BC73A990CD7E001B23603E13C5C578

SHA1:6A0C522E3C9FBF62545B6CF4866E200C5D4FD99B

SHA256:593D1F8A0A18B68A2C641D69B993DA2BE8820F691A93E76FA988A0124E98DA9C

Analysis result

Threat level:No threats detected

Full analysis:Analysis https://zzb.bz/D7cKF No threats detected - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

No suspicious indicators.

INFO

Changes internet zones settings

iexplore.exe (PID: 2976)

Application launched itself

iexplore.exe (PID: 2976)

Creates files in the user directory

iexplore.exe (PID: 2976)
FlashUtil32_26_0_0_131_ActiveX.exe (PID: 2388)
iexplore.exe (PID: 3136)

Reads Internet Cache Settings

iexplore.exe (PID: 3136)
iexplore.exe (PID: 2976)

Reads internet explorer settings

iexplore.exe (PID: 3136)

Reads settings of System Certificates

iexplore.exe (PID: 2976)

Dropped object may contain Bitcoin addresses

iexplore.exe (PID: 3136)

Changes settings of System certificates

iexplore.exe (PID: 2976)

Adds / modifies Windows certificates

iexplore.exe (PID: 2976)

Threats

No threats detected