We're sorry but any.run reports doesn't work properly without JavaScript enabled. Please enable it to continue.
Analysis result
Behavior activities
Threats
Find similar analyses in TI Lookup
Analysis date (UTC):
20 December 2019, 14:22
Analysis environment:
Windows 7 Pro, build 7601, x86
download.exe
MD5:
0DCEE360983FA2E073E9F07E06B6D695
SHA1:
505B96B31B19A1D85276D3A71E1D6398ABE3BEA5
SHA256:
C8AA5D58A3ACD80E2175E8ED1B3A685EE0410BA1C528EAB5C9204006A4033F48
Analysis result
Threat level:
Malicious activity
Tags:
trojan
Full analysis:
Analysis download.exe (MD5: 0DCEE360983FA2E073E9F07E06B6D695) Malicious activity - Interactive analysis ANY.RUN
Behavior activities
MALICIOUS
Connects to CnC server
wscript.exe (PID: 776)
Loads the Task Scheduler COM API
schtasks.exe (PID: 792)
Uses Task Scheduler to run other applications
wscript.exe (PID: 776)
Starts NET.EXE to view/add/change user profiles
wscript.exe (PID: 776)
SUSPICIOUS
Executes scripts
download.exe (PID: 960)
INFO
No info indicators.
Threats
No threats detected