popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

ClassLibrary1.dll

AsyncRAT PE32 .NET DLL PE File DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 June 1, 2021, 1:25 p.m. June 1, 2021, 1:26 p.m.
Size 61.5KB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 be12adb79c30513a8a6eee55be2cae12
SHA256 64b5682cba9ccfe1c7e2d8eefcccb8aa42097633905e18191a5590d17cdffd45
CRC32 99AE2868
ssdeep 768:TjBmgXiFngfp6egyKeY3kNH+QUrdtE/PO+qcHe4MUvE4p2obUN74MjwNCd06U1h1:nXy9gB6eR5Ys6rXwx1hVT+WY/LgP
Yara
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • Is_DotNET_DLL - (no description)
  • IsPE32 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

CrowdStrike win/malicious_confidence_60% (W)
Alibaba TrojanSpy:Win32/Downloader.f7048ec8
APEX Malicious
Ikarus Trojan-Spy.MassLogger