File name: | f740df4d3a6c0b378116b48c1ed18a36e82938cf7dcaaba58f0ba8101f3e3531.zip |
Full analysis: | https://app.any.run/tasks/8b4f1f2b-14bc-4243-8323-54b4303ba4f8 |
Verdict: | Malicious activity |
Analysis date: | July 17, 2019, 17:32:52 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/zip |
File info: | Zip archive data, at least v2.0 to extract |
MD5: | 997E33F891ED7BA8F8475ACF8E72E4E4 |
SHA1: | D943358DAFE4F827FE8B0A6F38C855F421DD200A |
SHA256: | B2B8883F65A982F686513EC52D480C45343DA97DE5A0274B65E723C52E0C0321 |
SSDEEP: | 48:EwbCs7DnOCyjY1vKaV0MossjYiYa+pPaD6NcdPmXaf16dAuXejMfsMbSjElWYihj:zt/V1YjxWy+NcdPRMdM4fsKfWYuj |
.zip | | | ZIP compressed archive (100) |
---|
ZipRequiredVersion: | 788 |
---|---|
ZipBitFlag: | 0x0001 |
ZipCompression: | Deflated |
ZipModifyDate: | 2019:07:17 17:32:07 |
ZipCRC: | 0xd10f2bbc |
ZipCompressedSize: | 2983 |
ZipUncompressedSize: | 7680 |
ZipFileName: | f740df4d3a6c0b378116b48c1ed18a36e82938cf7dcaaba58f0ba8101f3e3531.bin |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3612 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\Desktop\f740df4d3a6c0b378116b48c1ed18a36e82938cf7dcaaba58f0ba8101f3e3531.zip" | C:\Program Files\WinRAR\WinRAR.exe | — | explorer.exe |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 | ||||
3056 | "C:\Users\admin\Desktop\f740df4d3a6c0b378116b48c1ed18a36e82938cf7dcaaba58f0ba8101f3e3531.exe" | C:\Users\admin\Desktop\f740df4d3a6c0b378116b48c1ed18a36e82938cf7dcaaba58f0ba8101f3e3531.exe | explorer.exe | |
User: admin Integrity Level: HIGH Description: Ranger.BrowserLogging.Tests Exit code: 0 Version: 1.0.0.0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
3612 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRb3612.29940\f740df4d3a6c0b378116b48c1ed18a36e82938cf7dcaaba58f0ba8101f3e3531.bin | — | |
MD5:— | SHA256:— |
PID | Process | IP | Domain | ASN | CN | Reputation |
---|---|---|---|---|---|---|
3056 | f740df4d3a6c0b378116b48c1ed18a36e82938cf7dcaaba58f0ba8101f3e3531.exe | 104.27.182.176:443 | puu.sh | Cloudflare Inc | US | shared |
Domain | IP | Reputation |
---|---|---|
puu.sh |
| shared |