Quickly Check if a Sample is Malicious with ANY.RUN’s Process Tree
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Scheduled Task - T1053.005 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 2dfbde12-6990-4e8d-a80a-705c677255d4
Fingerprint a400d905b9bd0735
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 10, 2024, 10:02 a.m.
Added to db Dec. 10, 2024, 11:30 a.m.
Last updated Dec. 26, 2024, 9:59 a.m.
Headline Quickly Check if a Sample is Malicious with ANY.RUN’s Process Tree
Title Quickly Check if a Sample is Malicious with ANY.RUN’s Process Tree
Detected Hints/Tags/Attributes 33/2/8
Source URLs
Redirection Url
Details Source https://medium.com/@anyrun/quickly-check-if-a-sample-is-malicious-with-any-runs-process-tree-d26fc31cd2ef?source=rss------cybersecurity-5
Details Source https://medium.com/@anyrun/quickly-check-if-a-sample-is-malicious-with-any-runs-process-tree-d26fc31cd2ef?source=rss------malware-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 171 ✔ Malware on Medium https://medium.com/feed/tag/malware 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1179 
any.run
Details Domain 9 
svchost.com
Details File 5 
notice.exe
Details File 3 
shtasks.exe
Details File 1 
schatsk.exe
Details File 1 
c:\users\admin\appdata\local\temp\tmp40b2.tmp
Details File 1200 
svchost.exe
Details File 1357 
powershell.exe