Cuckoo Sandbox

Name	9fea97e4b6379e4a_scegli_nome_allegato.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Roaming\Scegli_nome_allegato.exe
Size	1.0MB
Processes	2404 (aad2bdb17f8cfd3a7cfeb83efd1c508f3a5e7e59fb7a88b8a987869a0074a392.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`d7bb7ff28d2fa2fe9eb1f7110f855e95`
SHA1	`dcecc6484d9f4abdd8eef280b7e07486630c564e`
SHA256	`9fea97e4b6379e4a4ac9c9a027e2fb8145d381594cf3f116bacb6a0f3d8bc57a`
CRC32	`1FB25E1A`
ssdeep	`None`
Yara	screenshot - Take screenshot keylogger - Run a keylogger win_registry - Affect system registries win_files_operation - Affect private profile win_hook - Affect hook table
VirusTotal	Search for analysis

Name	35b131914173b444_7d57ad13e21.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Roaming\7D57AD13E21.exe
Size	5.7MB
Processes	2404 (aad2bdb17f8cfd3a7cfeb83efd1c508f3a5e7e59fb7a88b8a987869a0074a392.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`bb81be5d3a2b24993f0c1841e0fdfe91`
SHA1	`d96dee48d4b9321861547a07d132991320b5f945`
SHA256	`35b131914173b444d7917d2d78a6cf2c6cfee00d99636e61b18370bd738e1f7d`
CRC32	`E4D93DD1`
ssdeep	`None`
Yara	screenshot - Take screenshot keylogger - Run a keylogger win_registry - Affect system registries win_files_operation - Affect private profile win_hook - Affect hook table
VirusTotal	Search for analysis

Dropped Files