Find similar analyses in TI Lookup
Analysis date (UTC): 18 September 2018, 10:49Analysis environment: Windows 7 Pro, build 7601, x86

1234.txt

MD5:C92EA5B103F197F030F2C755932B9D36
SHA1:C588B9BB5D2F35172087A219FDBA9E62C72D0BFA
SHA256:F29A7D2ECD3585E1E4208E44BCC7156AB5388725F1D29D03E7699DA0D4598E7C

Analysis result

Threat level:Malicious activity
Tags:
trojan
Full analysis:Analysis 1234.txt (MD5: C92EA5B103F197F030F2C755932B9D36) Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

Registers / Runs the DLL via REGSVR32.EXE

  • regsvr32.exe (PID: 3332)
  • REgsvr32.exe (PID: 2956)

Changes the autorun value in the registry

  • regsvr32.exe (PID: 3332)

SUSPICIOUS

Creates files in the user directory

  • regsvr32.exe (PID: 3332)
  • REgsvr32.exe (PID: 2956)

Application launched itself

  • regsvr32.exe (PID: 3332)
  • REgsvr32.exe (PID: 2956)

Starts CMD.EXE for commands execution

  • regsvr32.exe (PID: 3332)

INFO

Loads main object executable

  • regsvr32.exe (PID: 3332)

Threats

PIDProcessClassMessage
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware
1308regsvr32.exeA Network Trojan was detectedSC TROJAN_DOWNLOADER BScope.Trojan, unknown malware

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN

© 2017-2026 ANY.RUN LLC. ALL RIGHTS RESERVED