File name: | Godzilla_loader_bulder.rar |
Full analysis: | https://app.any.run/tasks/de4079db-5e10-4050-89a5-e6daebbf535b |
Verdict: | Malicious activity |
Analysis date: | March 21, 2019, 07:45:41 |
OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
Indicators: | |
MIME: | application/x-rar |
File info: | RAR archive data, v4, os: Win32 |
MD5: | CF9B8442C30BA42717224A8C0B040710 |
SHA1: | 014618F7780AA06A4ADED1082CE4F739341CD2C0 |
SHA256: | F9331B3B4C5F4FA95CCF776C575F674D08D982CA7C8335AB473FDA9EC1F9574F |
SSDEEP: | 384:df4bDd6BK9g62lOUw+NXk8NFwd86fKDABnzcEGszhPByD:tCDdmKW6y7NVNud8SKMZzm6hPByD |
.rar | | | RAR compressed archive (v-4.x) (58.3) |
---|---|---|
.rar | | | RAR compressed archive (gen) (41.6) |
ArchivedFileName: | builder.exe |
---|---|
PackingMethod: | Normal |
ModifyDate: | 2017:08:04 21:37:02 |
OperatingSystem: | Win32 |
UncompressedSize: | 24576 |
CompressedSize: | 10892 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
1816 | "C:\Program Files\WinRAR\WinRAR.exe" "C:\Users\admin\Desktop\Godzilla_loader_bulder.rar" | C:\Program Files\WinRAR\WinRAR.exe | explorer.exe | |
User: admin Company: Alexander Roshal Integrity Level: MEDIUM Description: WinRAR archiver Version: 5.60.0 | ||||
2032 | "C:\Users\admin\Desktop\builder.exe" | C:\Users\admin\Desktop\builder.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 0 | ||||
3136 | "C:\Users\admin\Desktop\builder.exe" | C:\Users\admin\Desktop\builder.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 3221225547 | ||||
3780 | "C:\Users\admin\Desktop\builder.exe" | C:\Users\admin\Desktop\builder.exe | — | explorer.exe |
User: admin Integrity Level: MEDIUM Exit code: 0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
1816 | WinRAR.exe | C:\Users\admin\AppData\Local\Temp\Rar$DRa1816.36776\builder.exe | executable | |
MD5:C254CF033BFFE331EB8FC3CBC0601BE0 | SHA256:7996C8CDD3A4E3FF4872F4FEF5325FBA547D90BCDC6169EF355B18C647281E53 |