We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
28 November 2023, 08:27
Analysis environment:
Windows 7 Pro, build 7601, x86
sqlite3.dll
MD5:
2BA363CB9C8ECA112DAA44CFB567E91E
SHA1:
37AF542FE44A189FB7EFB1702D567E516ABDFFFB
SHA256:
8BE3304FEC9D41D44012213DDBB28980D2570EDEEF3523B909AF2F97768A8D85
Analysis result
Threat level:
Malicious activity
Full analysis:
Analysis sqlite3.dll (MD5: 2BA363CB9C8ECA112DAA44CFB567E91E) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Drops the executable file immediately after the start
cmd.exe (PID: 1668)
SUSPICIOUS
Powershell version downgrade attack
powershell.exe (PID: 2168)
Starts CMD.EXE for commands execution
powershell.exe (PID: 2168)
Process drops SQLite DLL files
cmd.exe (PID: 1668)
INFO
Manual execution by a user
powershell.exe (PID: 2168)
Threats
No threats detected