Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

Summary | ZeroBOX

cover.cab

Malicious Packer Malicious Library OS Processor Check

Category	Machine	Started	Completed
FILE	s1_win7_x6401	Sept. 15, 2021, 11:14 a.m.	Sept. 15, 2021, 11:16 a.m.

Size	2.0MB
Type	Microsoft Cabinet archive data, 2142297 bytes, 1 file
MD5	`edaa11c6b13f9ea8542884804a53bf67`
SHA256	`77b5b1509388204b495ed179dc3dfeb009b41d522e710f7c2575fd28c2ca54cb`
CRC32	`33AD46FA`
ssdeep	`49152:EKxMTnTXM2QSHE5yO99AI2u/9Pf8YNt8nqPu/FtZ+k:cbgwu/B8YNax/Fz+k`
Yara	Malicious_Packer_Zero - Malicious Packer OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library

cmd.exe "C:\Windows\System32\cmd.exe" /c start /wait "ibFJY" C:\Users\test22\AppData\Local\Temp\cover.cab
2648

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

No signatures