popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

645d85f10366f.zip

ZIP Format
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 May 12, 2023, 9:40 a.m. May 12, 2023, 9:42 a.m.
Size 2.2MB
Type Zip archive data, at least v2.0 to extract
MD5 e5e14d83b8c78f4ef66ec2fa554ddada
SHA256 532dbb190b2a5e48dbd26ceaa2592d28c4d6a26d8bbdf03fb7fbafc404689808
CRC32 B0F390B3
ssdeep 49152:6Q6J3WM202p5GutgAJuIxyxWCIZsS85PWZ5FvcBg:p89i7JDmWgzP+Ug
Yara
  • zip_file_format - ZIP file format

Name Response Post-Analysis Lookup
geo.netsupportsoftware.com
A 51.142.119.24
CNAME geography.netsupportsoftware.com
A 62.172.138.67
62.172.138.67
blahadfurtik.com
A 89.22.237.94
89.22.237.94
IP Address Status Action
164.124.101.2 Active Moloch
62.172.138.67 Active Moloch
89.22.237.94 Active Moloch

suspicious_features GET method with no useragent header suspicious_request GET http://geo.netsupportsoftware.com/location/loca.asp
request GET http://geo.netsupportsoftware.com/location/loca.asp