Cuckoo Sandbox

Name	53a68dd36771d999_backup.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\9C7EA51D-B2B9-4ABB-A82F-1B32707A146E\backup.exe
Size	446.8KB
Processes	1848 (c1095ce02c0b7ddd_backup.exe)
Type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`fc6cf5059b6a0bfefa738000454cd79d`
SHA1	`37959fec3b2fa667c681e1a1c5e123b697d4dc53`
SHA256	`53a68dd36771d999425040d7a7e34cdeb862237ae40b55a663004becdccf9461`
CRC32	`31A2C82D`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords SEH__vba - (no description) escalate_priv - Escalade priviledges win_mutex - Create or check mutex win_registry - Affect system registries win_token - Affect system token
VirusTotal	Search for analysis

Name	be54bb2a4a8e1671_data.exe Download Submit file
Filepath	C:\data.exe
Size	446.8KB
Processes	1764 (data.exe)
Type	PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`68cb112d9c83f0f6ddabbf9dcc51bc9b`
SHA1	`3504a14860995bd1cfb8f771276144a6861546a8`
SHA256	`be54bb2a4a8e16718bfe08e945ce0de5af466d82eacba653aee5b81c62b483d1`
CRC32	`8426C7BF`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords SEH__vba - (no description) escalate_priv - Escalade priviledges win_mutex - Create or check mutex win_registry - Affect system registries win_token - Affect system token
VirusTotal	Search for analysis

Dropped Files