We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
21 August 2020, 10:24
Analysis environment:
Windows 7 Pro, build 7601, x86
control.bat
MD5:
553908FB97DE01FEDD83DFCC14D6CCD1
SHA1:
D05C974C5CD0EDED2543EA805EDF012094FC80D4
SHA256:
9DCBD14AE1B047C21A3AE6C544D34B13BE8414C047519FA135249049204E7327
Analysis result
Threat level:
Malicious activity
Full analysis:
Analysis control.bat (MD5: 553908FB97DE01FEDD83DFCC14D6CCD1) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Starts NET.EXE for service management
cmd.exe (PID: 2128)
SUSPICIOUS
Starts SC.EXE for service management
cmd.exe (PID: 2128)
Creates files in the Windows directory
cmd.exe (PID: 2128)
Uses ATTRIB.EXE to modify file attributes
cmd.exe (PID: 2128)
Removes files from Windows directory
cmd.exe (PID: 2128)
Uses WMIC.EXE to obtain a system information
cmd.exe (PID: 2128)
INFO
No info indicators.
Threats
No threats detected