popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

file.zip

ZIP Format
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 March 15, 2023, 3:09 p.m. March 15, 2023, 3:12 p.m.
Size 5.1MB
Type Zip archive data, at least v2.0 to extract
MD5 e2dbdc78e35b9e2a41fb7a966ddf02dc
SHA256 c983a82de63f04867c5c20fad56419d908663a0ab6684420420f20c93cbcccfd
CRC32 7EBD0B40
ssdeep 98304:TenezqtcvLbr5efZQC9gtxx1NMxyue2Ovm5SUTCRlkdGPN6b1EEis5nL0h:TenezpHmZ/9gRLiepvmkbRudGPZsFLm
Yara
  • zip_file_format - ZIP file format

Name Response Post-Analysis Lookup
don-die.com
A 104.21.50.222
A 172.67.167.162
172.67.167.162
IP Address Status Action
104.21.50.222 Active Moloch
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

request GET http://don-die.com/hittest.php?a=NH0goI0w1hXW19v&id=110
request GET http://don-die.com/hittest.php?a=aElEffzR1gQfbVP&id=110
Elastic malicious (high confidence)
FireEye Gen:Variant.Razy.668800
VIPRE Gen:Variant.Razy.668800
Sangfor Suspicious.Win32.Save.a
BitDefenderTheta AI:Packer.F33D0F471E
Avast Win32:Evo-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan.Win32.Generic
BitDefender Gen:Variant.Razy.668800
NANO-Antivirus Virus.Win32.Gen-Crypt.ccnc
Sophos Generic ML PUA (PUA)
Emsisoft Gen:Variant.Razy.668800 (B)
SentinelOne Static AI - Malicious Archive
Avira TR/Crypt.XPACK.Gen
MAX malware (ai score=88)
Arcabit Trojan.Razy.DA3480
GData Gen:Variant.Razy.668800
AhnLab-V3 Trojan/Win.Generic.R562151
Acronis suspicious
Zoner Probably Heur.ExeHeaderL
Rising Trojan.Xpack!8.16E41 (TFE:1:MBgONq0t6ZN)
AVG Win32:Evo-gen [Trj]