Analysis date (UTC): 23 March 2020, 01:08Analysis environment: Windows 7 Pro, build 7601, x86

Bitcoin Money Adder - [Cracked By Badboy] - [C-Cracking.org].rar

MD5:160F70C8ECD3230657392BE61FB41ECA
SHA1:B04931304DAF3ED03B5D33E5D44D8E9F7B1AA535
SHA256:FF1398AF237FFDC96744BDEC79DA631D0A5BDA69A2A4FFFE60F4872163CA066B

Analysis result

Behavior activities

MALICIOUS

Loads dropped or rewritten executable

  • Bitcoin Money Adder - [Cracked By Badboy] - [C-Cracking.org].exe (PID: 3512)

Application was dropped or rewritten from another process

  • Bitcoin Money Adder - [Cracked By Badboy] - [C-Cracking.org].exe (PID: 3512)

SUSPICIOUS

Starts Internet Explorer

  • Bitcoin Money Adder - [Cracked By Badboy] - [C-Cracking.org].exe (PID: 3512)

Executable content was dropped or overwritten

  • WinRAR.exe (PID: 3984)

INFO

Reads Internet Cache Settings

  • iexplore.exe (PID: 2772)
  • iexplore.exe (PID: 3336)

Creates files in the user directory

  • iexplore.exe (PID: 2772)

Changes internet zones settings

  • iexplore.exe (PID: 3336)

Application launched itself

  • iexplore.exe (PID: 3336)

Reads internet explorer settings

  • iexplore.exe (PID: 2772)

Reads settings of System Certificates

  • iexplore.exe (PID: 3336)
  • iexplore.exe (PID: 2772)

Adds / modifies Windows certificates

  • iexplore.exe (PID: 3336)

Changes settings of System certificates

  • iexplore.exe (PID: 3336)

Threats

No threats detected

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN