Cuckoo Sandbox

Name	1cda3401c20b0c4b_1cda3401c20b0c4b35efb2dc7f30d3787e31e378cc5de8d732ee556b0a585275.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\1cda3401c20b0c4b35efb2dc7f30d3787e31e378cc5de8d732ee556b0a585275.exe
Size	2.7MB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`7cda6f75a79debbacb219be080fef938`
SHA1	`f474215578cd3b4032cd6f7eb1f47394acce11dd`
SHA256	`1cda3401c20b0c4b35efb2dc7f30d3787e31e378cc5de8d732ee556b0a585275`
CRC32	`09B7D024`
ssdeep	`None`
Yara	anti_dbg - Checks if being debugged inject_thread - Code injection with CreateRemoteThread in a remote process network_http - Communications over HTTP escalate_priv - Escalade priviledges screenshot - Take screenshot keylogger - Run a keylogger win_registry - Affect system registries win_token - Affect system token win_files_operation - Affect private profile
VirusTotal	Search for analysis

Name	85509e05e6ee4186_fmstuek.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\fmstuek.exe
Size	2.7MB
Processes	1368 (1cda3401c20b0c4b35efb2dc7f30d3787e31e378cc5de8d732ee556b0a585275.exe) 2648 (fmstuek.exe)
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`d31ffa6e552b2ead7ed585f636bb0e91`
SHA1	`3b6c6117cb4e5c415212028849f30243c50efe46`
SHA256	`85509e05e6ee41861e30656e2eab8f67b7032e84d0779ae72348e299192c6519`
CRC32	`552EA588`
ssdeep	`None`
Yara	anti_dbg - Checks if being debugged inject_thread - Code injection with CreateRemoteThread in a remote process network_http - Communications over HTTP escalate_priv - Escalade priviledges screenshot - Take screenshot keylogger - Run a keylogger win_registry - Affect system registries win_token - Affect system token win_files_operation - Affect private profile
VirusTotal	Search for analysis

Dropped Files