File name: | virus.bat |
Full analysis: | https://app.any.run/tasks/9263a3d4-4115-4672-b4ea-8153ad1562db |
Verdict: | Malicious activity |
Analysis date: | May 20, 2022, 16:06:34 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | text/plain |
File info: | ASCII text, with CRLF line terminators |
MD5: | 533F57B1F9992F43D4702340BFE1BA5E |
SHA1: | CB74CFA421BC296FCAFAB7D4F95CA7C7A74C3A35 |
SHA256: | 92F3083E6229646D0F4D64E2297DE47F827E68D3417ED8FAFA36F01DA69A17D3 |
SSDEEP: | 3:8KQXGtohoJ0SZaEHzRkQI7JB6aEr7iIBjOGNMjJmROfXhFTmTnNGIO5KliFiOzuF:8cqo6SZbadAbU1PhVUN8vFFuZo4Vn |
PID | CMD | Path | Indicators | Parent process | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
2940 | C:\Windows\system32\cmd.exe /c ""C:\Users\admin\AppData\Local\Temp\virus.bat" " | C:\Windows\system32\cmd.exe | — | Explorer.EXE | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
| |||||||||||||||
2064 | C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\admin\AppData\Local\Temp\virus.bat"" | C:\Windows\system32\cmd.exe | — | cmd.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
| |||||||||||||||
2996 | C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\admin\AppData\Local\Temp\virus.bat"" | C:\Windows\system32\cmd.exe | — | cmd.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
| |||||||||||||||
3848 | C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\admin\AppData\Local\Temp\virus.bat"" | C:\Windows\system32\cmd.exe | — | cmd.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
| |||||||||||||||
3788 | C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\admin\AppData\Local\Temp\virus.bat"" | C:\Windows\system32\cmd.exe | — | cmd.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
| |||||||||||||||
2100 | C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\admin\AppData\Local\Temp\virus.bat"" | C:\Windows\system32\cmd.exe | — | cmd.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
| |||||||||||||||
3496 | C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\admin\AppData\Local\Temp\virus.bat"" | C:\Windows\system32\cmd.exe | — | cmd.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
| |||||||||||||||
3684 | C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\admin\AppData\Local\Temp\virus.bat"" | C:\Windows\system32\cmd.exe | — | cmd.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
| |||||||||||||||
3688 | C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\admin\AppData\Local\Temp\virus.bat"" | C:\Windows\system32\cmd.exe | — | cmd.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
| |||||||||||||||
3680 | C:\Windows\system32\cmd.exe /S /D /c" "C:\Users\admin\AppData\Local\Temp\virus.bat"" | C:\Windows\system32\cmd.exe | — | cmd.exe | |||||||||||
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Windows Command Processor Version: 6.1.7601.17514 (win7sp1_rtm.101119-1850) Modules
|