Cuckoo Sandbox

Name	4dc9c9cf89b72402_e37ac6dc5df5eb1a_7za.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\3582-490\e37ac6dc5df5eb1a_7za.exe
Size	763.0KB
Processes	2748 (e37ac6dc5df5eb1a_7za.exe) 2232 (e37ac6dc5df5eb1a_7za.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`8e33824aeaa0cfe1cefb97a343112eab`
SHA1	`37fda2738a4a46d87de43d78c347ddd337e2d892`
SHA256	`4dc9c9cf89b72402c225c013a0625aeb875e8b8573b7d8ac0641cadcce5590ec`
CRC32	`01BFC9EE`
ssdeep	`None`
Yara	DebuggerException__SetConsoleCtrl - (no description) escalate_priv - Escalade priviledges screenshot - Take screenshot keylogger - Run a keylogger win_mutex - Create or check mutex win_registry - Affect system registries win_token - Affect system token win_files_operation - Affect private profile
VirusTotal	Search for analysis

Name	980bac6c9afe8efc_svchost.com Download Submit file
Filepath	C:\Windows\svchost.com
Size	40.5KB
Processes	2748 (e37ac6dc5df5eb1a_7za.exe) 2232 (e37ac6dc5df5eb1a_7za.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`36fd5e09c417c767a952b4609d73a54b`
SHA1	`299399c5a2403080a5bf67fb46faec210025b36d`
SHA256	`980bac6c9afe8efc9c6fe459a5f77213b0d8524eb00de82437288eb96138b9a2`
CRC32	`5723A635`
ssdeep	`None`
Yara	screenshot - Take screenshot keylogger - Run a keylogger win_mutex - Create or check mutex win_registry - Affect system registries win_files_operation - Affect private profile
VirusTotal	Search for analysis

Dropped Files