Dropped Burrfers

Name	181a75cf34e9691ec455d0edb5e2530a57f457a8
Size	208.0KB
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`0ca417d52c2ac84e3bdead5046ac2df1`
SHA1	`181a75cf34e9691ec455d0edb5e2530a57f457a8`
SHA256	`db0b17093c5ac26ded8dfdc81c304917d23d4ce5d04886b527723a631c4bf621`
CRC32	`FBF07863`
ssdeep	`6144:/DKW1Lgbdl0TBBvjc/chWYrsjyoxrz59:bh1Lk70TnvjcUhCnxrN9`
Yara	PE_Header_Zero - PE File Signature OS_Processor_Check_Zero - OS Processor Check UPX_Zero - UPX packed file Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) UltraVNC_Zero - UltraVNC
VirusTotal	Search for analysis

Name	2228ab6dc7b5b300bfeb74571031a0c4950a8f7a
Size	10.4MB
Type	ASCII text, with very long lines, with no line terminators
MD5	`e21fa20fa791dc724993f0ef16336aae`
SHA1	`2228ab6dc7b5b300bfeb74571031a0c4950a8f7a`
SHA256	`028f75be56b7492b1bb01b26bcaf93fb404bbce5ace1211fbd1d2ae431e9f95a`
CRC32	`FE939365`
ssdeep	`49152:q9dhRjxc+NEzAcJOCs9TMFo4ax8y2uMKaRVLoLsl9eoRnZYiGRqVlfXB3BCgonXt:M`
Yara	OS_Processor_Check_Zero - OS Processor Check anti_vm_detect - Possibly employs anti-virtualization techniques NPKI_Zero - File included NPKI
VirusTotal	Search for analysis