popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

i3YFqH6uMO3o8pg2Cbx.zip

  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 March 9, 2023, 5:07 p.m. March 9, 2023, 5:10 p.m.
Size 867.1KB
Type Zip archive data, at least v2.0 to extract
MD5 5a72267343811d8fe7d72c1f96bac927
SHA256 17a85317e36cca87611e4e956679cfcfc4777735bc9f23652a5c14582bfd5968
CRC32 2E7A4BF5
ssdeep 12288:k4DKwKHCjAbD7j9kd1j89Gpm19Fkf7/sw:zevtlkdJe4m19FgD
Yara None matched

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
103.132.242.26 Active Moloch
104.168.155.143 Active Moloch
164.124.101.2 Active Moloch
164.90.222.65 Active Moloch
167.172.199.165 Active Moloch
182.162.143.56 Active Moloch
183.111.227.137 Active Moloch
187.63.160.88 Active Moloch
66.228.32.31 Active Moloch
72.15.201.15 Active Moloch
91.121.146.47 Active Moloch
91.207.28.33 Active Moloch

Baidu Archive.Bomb
Kaspersky HEUR:Trojan.Win32.Heavy.gen
McAfee-GW-Edition Artemis!Trojan
MAX malware (ai score=83)
VBA32 suspected of Archive.MailBomb
Rising Malware.SwollenFile!1.DDB4 (CLASSIC)
host 103.132.242.26
host 104.168.155.143
host 164.90.222.65
host 167.172.199.165
host 182.162.143.56
host 183.111.227.137
host 187.63.160.88
host 66.228.32.31
host 72.15.201.15
host 91.121.146.47
host 91.207.28.33
dead_host 192.168.56.102:49219
dead_host 72.15.201.15:8080
dead_host 91.207.28.33:8080
dead_host 164.90.222.65:443
dead_host 192.168.56.102:49217
dead_host 103.132.242.26:8080
dead_host 104.168.155.143:8080
dead_host 183.111.227.137:8080