download: | nitro%20generator.rar |
Full analysis: | https://app.any.run/tasks/c0ac1ec0-7108-46ca-b358-199a67ba4781 |
Verdict: | Malicious activity |
Analysis date: | November 29, 2020, 21:39:27 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/x-rar |
File info: | RAR archive data, v5 |
MD5: | 37F1F0A8EBFF3F9E9FF7C3AACE2BB6BB |
SHA1: | 4BAAEBF31487A457D89B169EB686CDD250742443 |
SHA256: | 8534489FFB28C30C6620F1A57A16CFFC54753FA56448BD296AE4415F13B7E56F |
SSDEEP: | 196608:vTOvyXApzr7/5Qh94Ekr+qSH8br+lccxf+oBWK4U1zN:KvyXIz894fr+qScGlccjWKD1h |
.rar | | | RAR compressed archive (v5.0) (61.5) |
---|---|---|
.rar | | | RAR compressed archive (gen) (38.4) |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2444 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\7a07230e-1c19-4b89-83e5-0f72b193f63f.rar" | C:\Program Files\WinRAR\WinRAR.exe | explorer.exe | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\base_library.zip | compressed | |
MD5:34460EBCFC5470B9C20C6BF94BACBC38 | SHA256:555D121270A7CB5473BA4A21627CEEF767BA08A9043792043FE7922BA841CD1D | |||
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\nitro.exe | executable | |
MD5:BADB01F5EFBC50BFB5FE7E652D747C7B | SHA256:100C4AF1BE36ECEAAFC10A6F539A15562E6E105B0D56F7AE1BEFC441ACC48F08 | |||
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\nitro.exe.manifest | xml | |
MD5:035183A79721D32B97B2634DD1806EEF | SHA256:5079278847D983F802890D11E7DB8AB6089A36BEAA53A1A404E6D1DE3204841B | |||
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\Include\pyconfig.h | text | |
MD5:26B13282EE7903A4BBF18749D1EEC854 | SHA256:6F491D071451BB432D6E4E6D64F2CC760498F26A936CD309A82B8DAB62B2F1FC | |||
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\lib2to3\PatternGrammar3.8.6.final.0.pickle | binary | |
MD5:F6DF5E3F1663A4E238BAADA95F5A0612 | SHA256:36EE934395B9209737B13893DDAFF05FAD8E239C2FDFAC29D401D3FCEEB30768 | |||
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\lib2to3\tests\data\README | text | |
MD5:D3D39C73DE677A4415097DD577E1097A | SHA256:B7442A0D467C1BC14706408CDB44109DF70728AD4472E1FB0B60947A053752F1 | |||
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\lib2to3\PatternGrammar.txt | text | |
MD5:979BF0985B9B796D53C07BE40F02B132 | SHA256:9BAC1F5A4EF2DFE428DF9AFBECD59D250EFC5CBD42A93FCF9B4C6BE9E08E7693 | |||
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\lib2to3\Grammar3.8.6.final.0.pickle | binary | |
MD5:A2CFAF68A1089BED9340060E0464F9F8 | SHA256:A892C54AE88C21B860B90D8B5688EA5928910788B164884E5EAA935AD89B1F3F | |||
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\tcl\clock.tcl | text | |
MD5:F1E825244CC9741595F47F4979E971A5 | SHA256:F0CF27CB4B5D9E3B5D7C84B008981C8957A0FF94671A52CC6355131E55DD59FB | |||
2444 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa2444.32631\Nitro Generator\nitro\libffi-7.dll | executable | |
MD5:EEF7981412BE8EA459064D3090F4B3AA | SHA256:F60DD9F2FCBD495674DFC1555EFFB710EB081FC7D4CAE5FA58C438AB50405081 |