Cuckoo Sandbox

Name	ae84270a19088c37_rifaien2-V6yelpXPUdfN8Luz.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\rifaien2-V6yelpXPUdfN8Luz.exe
Size	236.0KB
Processes	2604 (e2ab20947faaaa3b_rifaien2-8unazgumkyfkowoa.exe)
Type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`0b84ca791efbee787145452ba91bd4b8`
SHA1	`9669c24c8fb13d6e4a31451378d5b102c2edd5cd`
SHA256	`ae84270a19088c3789a2183153f902fb84ff3b1f8fb27efa7483f7f45915510f`
CRC32	`A010A7A2`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords network_tcp_listen - Listen for incoming communication network_tcp_socket - Communications over RAW socket network_dns - Communications use DNS
VirusTotal	Search for analysis

Name	631a9c29a4ca5ee7_rifaien2-7WoX89291osCO45j.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\rifaien2-7WoX89291osCO45j.exe
Size	236.0KB
Processes	2604 (e2ab20947faaaa3b_rifaien2-8unazgumkyfkowoa.exe)
Type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`334d00e82f432faadd03a31114c0c7cd`
SHA1	`fd23710a88acc9859775cd5df15f2a752bb9222d`
SHA256	`631a9c29a4ca5ee7335f6720eee8c3eaf648e8b0ecf9bbc5e9703cf00908976c`
CRC32	`02AEDBEA`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords network_tcp_listen - Listen for incoming communication network_tcp_socket - Communications over RAW socket network_dns - Communications use DNS
VirusTotal	Search for analysis

Dropped Files