Cuckoo Sandbox

Name	a6d09f15df55558e_rifaien2-OyiydJ6wQNncHaSm.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\rifaien2-OyiydJ6wQNncHaSm.exe
Size	236.0KB
Processes	1388 (e65b04abcef7e4de_rifaien2-fy5zfzbaqpik85ow.exe)
Type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`df82a0d5a2b1e1a33397d49e20ce169d`
SHA1	`c88c5d2d335e741151eda7bbea02230a50e421d0`
SHA256	`a6d09f15df55558efdb3ad675ed134f58620c624826bc0143c9dcab4503142ef`
CRC32	`64871EDC`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords network_tcp_listen - Listen for incoming communication network_tcp_socket - Communications over RAW socket network_dns - Communications use DNS
VirusTotal	Search for analysis

Name	235b19e17cf23710_rifaien2-QYOlCl1523z9r0ox.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\rifaien2-QYOlCl1523z9r0ox.exe
Size	236.0KB
Processes	1388 (e65b04abcef7e4de_rifaien2-fy5zfzbaqpik85ow.exe)
Type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`e60d5f401a5377ec978c9d252a4467a5`
SHA1	`c2e8fb3364692d30478b89e3d1bb122cd88d4102`
SHA256	`235b19e17cf23710edfec4cbd0d872f04a54ab4f0bb9ad9b2406ec7d0eb9244a`
CRC32	`697AF089`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords network_tcp_listen - Listen for incoming communication network_tcp_socket - Communications over RAW socket network_dns - Communications use DNS
VirusTotal	Search for analysis

Dropped Files