Analysis date (UTC): 9 March 2020, 18:08Analysis environment: Windows 7 Pro, build 7601, x86

2.exe

MD5:3E856162C36B532925C8226B4ED3481C
SHA1:F87AB33491EE84C579CAB9D87C7064A27A8CE371
SHA256:D854F775AB1071EEBADC0EB44D8571C387567C233A71D2E26242CD9A80E67309

Analysis result

Behavior activities

MALICIOUS

COBALTSTRIKE was detected

  • 2.exe (PID: 3240)

SUSPICIOUS

Reads Internet Cache Settings

  • 2.exe (PID: 3240)

INFO

No info indicators.

Threats

PIDProcessClassMessage
32402.exeA Network Trojan was detectedMALWARE [PTsecurity] Cobalt Strike Beacon Observed

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN