File name: | MX.exe.zip |
Full analysis: | https://app.any.run/tasks/7f5b1808-52fb-432a-9d01-5a90402aa07e |
Verdict: | Malicious activity |
Analysis date: | August 13, 2019, 12:40:37 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/zip |
File info: | Zip archive data, at least v2.0 to extract |
MD5: | 91F702F52234FEF01DD3A262E9A9DE5B |
SHA1: | 61A3990FF9C95134A912F6C6444F534D308FC646 |
SHA256: | C84A8EB13315F03EF2210DD584A07079565E610A50BEE415235C16272AD914FD |
SSDEEP: | 98304:/x0T4wfoaQHFkQ3FYz+Cnlj1tLNuLdQKBxyTEnJ1XJLZ/ytX45P2kJpWHUUnY7ci:/WJfoaSn3FYyClj1tLNiQenJ5T/8EeWn |
.zip | | | ZIP compressed archive (100) |
---|
ZipFileName: | MX.exe |
---|---|
ZipUncompressedSize: | 19842185 |
ZipCompressedSize: | 5472056 |
ZipCRC: | 0x668bf49e |
ZipModifyDate: | 2019:07:19 18:58:21 |
ZipCompression: | Deflated |
ZipBitFlag: | 0x0008 |
ZipRequiredVersion: | 20 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
3720 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\MX.exe.zip" | C:\Program Files\WinRAR\WinRAR.exe | explorer.exe | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Exit code: 0 Version: 5.60.0 | ||||
2572 | "C:\Users\admin\Desktop\MX.exe" | C:\Users\admin\Desktop\MX.exe | explorer.exe | |
User: admin Integrity Level: MEDIUM Exit code: 0 Version: 1.0.0.0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
2572 | MX.exe | C:\Users\admin\taskwin.exe | executable | |
MD5:6D4727DF92CD70E557D98070B2975EE4 | SHA256:8FC2242307A35A6927950BED6B8ACDE52A7CC577071289906D454E2F05D3B7B4 | |||
2572 | MX.exe | C:\Users\admin\ssl64.exe | executable | |
MD5:6D4727DF92CD70E557D98070B2975EE4 | SHA256:8FC2242307A35A6927950BED6B8ACDE52A7CC577071289906D454E2F05D3B7B4 | |||
3720 | WinRAR.exe | C:\Users\admin\Desktop\MX.exe | executable | |
MD5:6D4727DF92CD70E557D98070B2975EE4 | SHA256:8FC2242307A35A6927950BED6B8ACDE52A7CC577071289906D454E2F05D3B7B4 |