download: | muslimmassacre.zip |
Full analysis: | https://app.any.run/tasks/57362f6b-13e4-4226-800e-3c587f5b5137 |
Verdict: | Malicious activity |
Analysis date: | May 29, 2020, 23:32:14 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/zip |
File info: | Zip archive data, at least v2.0 to extract |
MD5: | 55ADAE9797CD69AF9DE92A5CD60ABDDF |
SHA1: | 0A0036C2A3ED5C03EA77A80631C33671901D2F8A |
SHA256: | BE7F11A3B842D46FBFB4B17851A68517771CDFF0ED11983A78B167570BAA3E7A |
SSDEEP: | 49152:jc358Un6xa1RLnjHs82nalpMqyEi7T3yYCKa0JSmuNLbQU8ympwDFVUaNozOFe3p:AiLehd/yEmeYCKa0Jhu5Knw8aNov |
.zip | | | ZIP compressed archive (100) |
---|
ZipFileName: | muslimmassacre/mm1.it |
---|---|
ZipUncompressedSize: | 123333 |
ZipCompressedSize: | 81148 |
ZipCRC: | 0xcbf1f0e5 |
ZipModifyDate: | 2016:11:02 08:58:02 |
ZipCompression: | Deflated |
ZipBitFlag: | - |
ZipRequiredVersion: | 20 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3560 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\Desktop\muslimmassacre.zip" | C:\Program Files\WinRAR\WinRAR.exe | — | explorer.exe |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Version: 5.60.0 | ||||
2136 | "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\admin\Desktop\muslimmassacre\mmboss.it" | C:\Program Files\VideoLAN\VLC\vlc.exe | explorer.exe | |
User: admin Company: VideoLAN Integrity Level: MEDIUM Description: VLC media player Exit code: 0 Version: 2.2.6 | ||||
3072 | "C:\Users\admin\Desktop\muslimmassacre\Muslim Massacre.exe" | C:\Users\admin\Desktop\muslimmassacre\Muslim Massacre.exe | explorer.exe | |
User: admin Company: Integrity Level: MEDIUM Description: Multimedia Fusion Application Runtime Exit code: 0 Version: 3, 0, 239, 0 | ||||
3568 | "C:\Users\admin\AppData\Local\Temp\mrt552D.tmp\stdrt.exe" /SF "C:\Users\admin\Desktop\muslimmassacre\Muslim Massacre.exe" /SO94208 | C:\Users\admin\AppData\Local\Temp\mrt552D.tmp\stdrt.exe | — | Muslim Massacre.exe |
User: admin Company: Clickteam Integrity Level: MEDIUM Description: Multimedia Fusion Stand Alone Application Exit code: 0 Version: 3.0.239.0 | ||||
3132 | "C:\Users\admin\Desktop\muslimmassacre\Muslim Massacre.exe" | C:\Users\admin\Desktop\muslimmassacre\Muslim Massacre.exe | explorer.exe | |
User: admin Company: Integrity Level: MEDIUM Description: Multimedia Fusion Application Runtime Exit code: 0 Version: 3, 0, 239, 0 | ||||
2732 | "C:\Users\admin\AppData\Local\Temp\mrtF689.tmp\stdrt.exe" /SF "C:\Users\admin\Desktop\muslimmassacre\Muslim Massacre.exe" /SO94208 | C:\Users\admin\AppData\Local\Temp\mrtF689.tmp\stdrt.exe | — | Muslim Massacre.exe |
User: admin Company: Clickteam Integrity Level: MEDIUM Description: Multimedia Fusion Stand Alone Application Exit code: 0 Version: 3.0.239.0 | ||||
2688 | "C:\Users\admin\Desktop\muslimmassacre\Muslim Massacre.exe" | C:\Users\admin\Desktop\muslimmassacre\Muslim Massacre.exe | explorer.exe | |
User: admin Company: Integrity Level: MEDIUM Description: Multimedia Fusion Application Runtime Version: 3, 0, 239, 0 | ||||
3824 | "C:\Users\admin\AppData\Local\Temp\mrt3EEC.tmp\stdrt.exe" /SF "C:\Users\admin\Desktop\muslimmassacre\Muslim Massacre.exe" /SO94208 | C:\Users\admin\AppData\Local\Temp\mrt3EEC.tmp\stdrt.exe | — | Muslim Massacre.exe |
User: admin Company: Clickteam Integrity Level: MEDIUM Description: Multimedia Fusion Stand Alone Application Version: 3.0.239.0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm1.it | — | |
MD5:— | SHA256:— | |||
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm10.it | — | |
MD5:— | SHA256:— | |||
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm11.it | — | |
MD5:— | SHA256:— | |||
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm12.it | — | |
MD5:— | SHA256:— | |||
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm2.it | — | |
MD5:— | SHA256:— | |||
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm3.it | — | |
MD5:— | SHA256:— | |||
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm4.it | — | |
MD5:— | SHA256:— | |||
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm5.it | — | |
MD5:— | SHA256:— | |||
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm6.it | — | |
MD5:— | SHA256:— | |||
3560 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa3560.49195\muslimmassacre\mm7.it | — | |
MD5:— | SHA256:— |
Process | Message |
---|---|
vlc.exe | core libvlc: one instance mode ENABLED
|
vlc.exe | core libvlc: Running vlc with the default interface. Use 'cvlc' to use vlc without interface.
|