File name: | 928872E014B39CA7CC7685D05C50E9064AA015CE8E9A10014EF5ED40563F7925.zip |
Full analysis: | https://app.any.run/tasks/c46f4e9e-0996-47bf-8f60-c0487d84db6d |
Verdict: | Malicious activity |
Analysis date: | December 02, 2019, 17:34:14 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/zip |
File info: | Zip archive data, at least v2.0 to extract |
MD5: | 563AA8421E7E8B4BD0BED73041E3603F |
SHA1: | 25A45075711793BA73CEC8F388580E5BC1B2D440 |
SHA256: | 8A8245ED83B02C08FC4742DCCD1E6E5F830AB6ABB89908D45F197AA14D1244A6 |
SSDEEP: | 384:LU8JICPkW4FQ2AZoJezFOX13XYIP/td2yF12upsKV0REMLR47Vp40/iJpNQIejBe:A8iYGJsoBn339GS0Rv45pL/2cxjBVU |
.zip | | | ZIP compressed archive (100) |
---|
ZipFileName: | 928872E014B39CA7CC7685D05C50E9064AA015CE8E9A10014EF5ED40563F7925 |
---|---|
ZipUncompressedSize: | 73731 |
ZipCompressedSize: | 28189 |
ZipCRC: | 0xabcf5021 |
ZipModifyDate: | 2019:12:02 17:32:12 |
ZipCompression: | Deflated |
ZipBitFlag: | 0x0009 |
ZipRequiredVersion: | 20 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
272 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\928872E014B39CA7CC7685D05C50E9064AA015CE8E9A10014EF5ED40563F7925.zip" | C:\Program Files\WinRAR\WinRAR.exe | explorer.exe | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 | ||||
2180 | "C:\Users\admin\Desktop\a.exe" | C:\Users\admin\Desktop\a.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 0 | ||||
1952 | "C:\Users\admin\Desktop\a.exe" | C:\Users\admin\Desktop\a.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
272 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRb272.8344\928872E014B39CA7CC7685D05C50E9064AA015CE8E9A10014EF5ED40563F7925 | executable | |
MD5:732767AA95A61AF5BE1D070925A1C8CF | SHA256:928872E014B39CA7CC7685D05C50E9064AA015CE8E9A10014EF5ED40563F7925 |