Summary | ZeroBOX

ster.exe

OS Processor Check PE64 PE File
Category Machine Started Completed
FILE s1_win7_x6401 May 7, 2021, 11:32 a.m. May 7, 2021, 11:45 a.m.
Size 261.5KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 5cef87c65c9a2545eb8c9151a5fa1e1d
SHA256 9088e5ed27f14a67077827ca9ec4bf6cfa24b4ec669d253e593a1a2d0c66b9da
CRC32 EF47F10E
ssdeep 6144:obpjhQX5nE8CBatjBq2PkD+rXpAF7TCc4QWoE/rzcPzny:0jGE8CBejtkD+r5Pdrzcu
Yara
  • IsPE64 - (no description)
  • OS_Processor_Check_Zero - OS Processor Check
  • PE_Header_Zero - PE File Signature

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GetComputerNameA

computer_name: TEST22-PC
1 1 0
section tdata
section mdata
section wdata
CrowdStrike win/malicious_confidence_60% (W)
Paloalto generic.ml
Kaspersky UDS:DangerousObject.Multi.Generic
Avast FileRepMalware
McAfee-GW-Edition Artemis!Trojan
Webroot W32.Malware.Gen
Kingsoft Win32.Troj.Undef.(kcloud)
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Trojan:Win32/Casdet!rfn
McAfee Artemis!5CEF87C65C9A
Rising Trojan.Casdet!8.FAA9 (CLOUD)
AVG FileRepMalware
Cybereason malicious.456130
Time & API Arguments Status Return Repeated

CryptHashData

buffer: 01ca0431 fdb0c77c.01ca0431 fec9a6f8.TEST22-PC.7c6024ad
hash_handle: 0x00000000003af870
flags: 0
1 1 0