File name: | sample_131.zip |
Full analysis: | https://app.any.run/tasks/378153af-aa30-4540-bb9a-16ca159b3946 |
Verdict: | Malicious activity |
Analysis date: | June 12, 2019, 11:29:12 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/zip |
File info: | Zip archive data, at least v2.0 to extract |
MD5: | 484FBEF0831326EC1916056254CE2BD8 |
SHA1: | 667DA226C126F00EBE129FA38ED5C0F5108852A5 |
SHA256: | 78AB6EEB9D05B02FB051CF15976EC0B2B75C6408D64C81584AED30145AE83269 |
SSDEEP: | 1536:qzTWdd2OA9j/uEa8Clqf3YLYW1CiYSDUdj6/zv4nF/djt6Dcaqr+Z8ie2ADc5nCj:qHWb2xj/da8h/Efmj67vCFVjOqaAen8z |
.zip | | | ZIP compressed archive (100) |
---|
ZipFileName: | sample_131/ |
---|---|
ZipUncompressedSize: | - |
ZipCompressedSize: | - |
ZipCRC: | 0x00000000 |
ZipModifyDate: | 2018:05:01 18:48:22 |
ZipCompression: | None |
ZipBitFlag: | - |
ZipRequiredVersion: | 20 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3336 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\sample_131.zip" | C:\Program Files\WinRAR\WinRAR.exe | explorer.exe | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Version: 5.60.0 | ||||
2976 | "C:\Users\admin\Desktop\sample_131.exe" | C:\Users\admin\Desktop\sample_131.exe | explorer.exe | |
User: admin Company: Denominava copyrightable oblongly Integrity Level: MEDIUM Description: esthesiogen Version: 5.03 | ||||
2176 | "C:\Users\admin\pfbot.exe" | C:\Users\admin\pfbot.exe | sample_131.exe | |
User: admin Company: Denominava copyrightable oblongly Integrity Level: MEDIUM Description: esthesiogen Version: 5.03 |
PID | Process | Filename | Type | |
---|---|---|---|---|
3336 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRb3336.49233\sample_131\sample_131 | executable | |
MD5:1E2D35D814223150A12E4C8EBDD0250B | SHA256:E8390CF4F2EECC43EAD45C2EF9C5BE00914D08DEDA26CDB47649185D2E207804 | |||
2976 | sample_131.exe | C:\Users\admin\pfbot.exe | executable | |
MD5:EA980CEF1E6531C6DB924097F71F723C | SHA256:6D9B8B845DEA098318109059DD22893035DE8DE6145352E0884D2C5C6E49E91D |
Domain | IP | Reputation |
---|---|---|
ns1.musiczipz.com |
| malicious |
ns1.musicmixa.net |
| unknown |
ns1.musicmixa.org |
| unknown |
ns1.musicmixb.co |
| malicious |
ns1.musicmixc.com |
| unknown |