File name: | E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.zip |
Full analysis: | https://app.any.run/tasks/7354ab4a-b155-44dc-8301-ff6710d46036 |
Verdict: | Malicious activity |
Analysis date: | September 19, 2019, 05:27:42 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/zip |
File info: | Zip archive data, at least v2.0 to extract |
MD5: | 048E9D12DCD728D13CC6DCAD3459D667 |
SHA1: | CE9DAAA1456E4EF24BD47D00646F8E32278803A5 |
SHA256: | E1796D752B208A0E5C2A0EBFF75B8C939E9259BD4D26E79550E2ED4981E95E2E |
SSDEEP: | 1536:IzM2ToqW0om7nqejsqZsfsBTcUv8ZA9RtEr6u:fH7UNoqZFxjftE2u |
.zip | | | ZIP compressed archive (100) |
---|
ZipFileName: | E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D |
---|---|
ZipUncompressedSize: | 94208 |
ZipCompressedSize: | 49137 |
ZipCRC: | 0x3ecef4ba |
ZipModifyDate: | 2019:09:19 06:51:02 |
ZipCompression: | Deflated |
ZipBitFlag: | 0x0001 |
ZipRequiredVersion: | 788 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
2772 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\AppData\Local\Temp\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.zip" | C:\Program Files\WinRAR\WinRAR.exe | explorer.exe | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Version: 5.60.0 | ||||
3864 | "C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe" | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 3221226540 | ||||
1456 | "C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe" | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 | ||||
3864 | "C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe" | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 3221226540 | ||||
3880 | "C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe" | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 | ||||
2480 | "C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe" | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 | ||||
2248 | "C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe" | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 | ||||
2568 | "C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe" | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 | ||||
892 | "C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe" | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 3221226540 | ||||
2424 | "C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe" | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D.exe | explorer.exe | |
User: admin Integrity Level: HIGH Exit code: 0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
2772 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D | executable | |
MD5:BC255742ECA763134016F7B80BE7E152 | SHA256:E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D | |||
2772 | WinRAR.exe | C:\Users\admin\Desktop\E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D | executable | |
MD5:BC255742ECA763134016F7B80BE7E152 | SHA256:E41D7F8F921EF7ED46F5C162013E7A3F139A922BEC564C5EB00B77435BB0529D |