Cuckoo Sandbox

Name	583a4aec22071db4_rifaien2-vhodu9aqre17aehl.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\rifaien2-VHodu9Aqre17aeHl.exe
Size	236.0KB
Processes	1920 (5439c19a73d2a825fafd384946d89ba31f0afac48eff196c0d6a3f496e8f2261.exe)
Type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`8a4bf4347cc271e87d8994ca1eeef15d`
SHA1	`5bcebc5b69d1f31464a8a43c6f7c2db2f5c73a0d`
SHA256	`583a4aec22071db42591618817bfd88749f059689bb38217077a1572b6080d98`
CRC32	`9E48D472`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords network_tcp_listen - Listen for incoming communication network_tcp_socket - Communications over RAW socket network_dns - Communications use DNS
VirusTotal	Search for analysis

Dropped Files