Cuckoo Sandbox

Name	c70d66566a3b07bb_rifaien2-d5k3PTSBQcfmr62G.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\rifaien2-d5k3PTSBQcfmr62G.exe
Size	236.0KB
Processes	3044 (583a4aec22071db4_rifaien2-vhodu9aqre17aehl.exe)
Type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`9a3ef2a5acfc9e04be68a7cbbc281299`
SHA1	`35ea20e6622cf2a32785039321a3d3cbc3e9bcfb`
SHA256	`c70d66566a3b07bba7784b40ef2f43ee7c5822194f2dee04e3b9257622c36725`
CRC32	`96D69564`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords network_tcp_listen - Listen for incoming communication network_tcp_socket - Communications over RAW socket network_dns - Communications use DNS
VirusTotal	Search for analysis

Name	74a49862e77b370d_rifaien2-WLelHfC9sFkPXbzo.exe Download Submit file
Filepath	C:\Users\Administrator\AppData\Local\Temp\rifaien2-WLelHfC9sFkPXbzo.exe
Size	236.0KB
Processes	3044 (583a4aec22071db4_rifaien2-vhodu9aqre17aehl.exe)
Type	PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
MD5	`750f256fbea56e1dc78bdf37ff9d4c03`
SHA1	`328736dc76badf9ff185beb2815d7f2f9cd51414`
SHA256	`74a49862e77b370df69267ce1e3d877436b7d91cb4d5c83d43e1e520bab727a2`
CRC32	`A01A93AC`
ssdeep	`None`
Yara	UPX - (no description) suspicious_packer_section - The packer/protector section names/keywords network_tcp_listen - Listen for incoming communication network_tcp_socket - Communications over RAW socket network_dns - Communications use DNS
VirusTotal	Search for analysis

Dropped Files