File name: | NoBan 0.0.2.rar |
Full analysis: | https://app.any.run/tasks/68aa7658-4986-4b5e-be5d-f43d2e885a2f |
Verdict: | Malicious activity |
Analysis date: | October 09, 2019, 18:31:54 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/x-rar |
File info: | RAR archive data, v5 |
MD5: | 1E6F24C7CB8E9BA0510E3FCDA7A9D410 |
SHA1: | A4A71535623B89E5E63D49D730C96ACD62CB5368 |
SHA256: | 64D59B857834A663F7CCFE021E96A3A69FE90E27B28824785D559871672880AD |
SSDEEP: | 24576:ChTXy8OuARoSsl4Kckbergb4Gr6KI6YMZKn6pm:UTXyAAR25jergcGr6KI6YMZ46pm |
.rar | | | RAR compressed archive (v5.0) (61.5) |
---|---|---|
.rar | | | RAR compressed archive (gen) (38.4) |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2836 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\NoBan 0.0.2.rar" | C:\Program Files\WinRAR\WinRAR.exe | — | explorer.exe |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 | ||||
3496 | "C:\Users\admin\Desktop\NoBan 0.0.2.exe" | C:\Users\admin\Desktop\NoBan 0.0.2.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 | ||||
3328 | "C:\Users\admin\Desktop\NoBan 0.0.2.exe" | C:\Users\admin\Desktop\NoBan 0.0.2.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
2836 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2836.44606\NoBan 0.0.2.exe | — | |
MD5:— | SHA256:— |