popup
Dropped Burrfers | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Buffers

Name c5d853d8bad74955d15f85cc36b7d37da54e7c21
Size 4.8KB
Type data
MD5 a41206c712d893f3c065242c76eb5608
SHA1 c5d853d8bad74955d15f85cc36b7d37da54e7c21
SHA256 07a0e5a7cbb4a0428dcd01e2f771347241bc209c7494b20a181d5ef3cfb3c68d
CRC32 7125D2C4
ssdeep 96:8i5U/RK6grM5U/RK6grEZvms1j3cx8WnWL9s:8l46grD46gr+Hxs6G29s
Yara None matched
VirusTotal Search for analysis
Name ea121214f0c1e113d5c5195cc03bc9940bb30337
Size 139.5KB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 f5a6eb35a756b320b48a8c8a0963d594
SHA1 ea121214f0c1e113d5c5195cc03bc9940bb30337
SHA256 c88ded614e43ec538122fd0c4378696d1f8f724bd1dcae6ccfdd1e8f1877d99c
CRC32 A91FCE2F
ssdeep 3072:l7bcaK96uK9RhZEGyASjdeqSwxqlqfrYNZIO7RJfMLpOt:23N4ZE1ASjNfH+1iY
Yara
  • Is_DotNET_DLL - (no description)
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 076cd4011ecf3520e60035c8945577fd095e812e
Size 162.0KB
Type data
MD5 53fdf334792cd0009868e5d788b60b2a
SHA1 076cd4011ecf3520e60035c8945577fd095e812e
SHA256 66f4e34670cd457228e45a048f69ec74e55812f24b44b6c571156ff7828972e3
CRC32 5EFC89F9
ssdeep 3072:7OJenJoJuzbQQoNbXU+j2crcerGqh2DX2HVX:oEUYQQoNbXU+ZrJz2KH
Yara
  • Win_Trojan_AgentTesla_M_B_Zero - Win Trojan AgentTesla
  • Malicious_Library_Zero - Malicious_Library
VirusTotal Search for analysis
Name 411af92cee03513af16056294331481078c594fc
Size 704.5KB
Type data
MD5 7da62cde341f19855731d6dcbe72dc9f
SHA1 411af92cee03513af16056294331481078c594fc
SHA256 15bbe43e3c02ea3a1288ba073d16d81a6dca796a1a12250876e4ee01a0fff005
CRC32 279AAF2D
ssdeep 12288:HeufSmujQx1fvLjvi5Bsnyq1Nl5FkG8WUkRNKstnfrNy0nCYKMtclZfaB/HxCpCx:Heufz+QTvLjqLsnt1NNFU2DRw0ChqBJ3
Yara None matched
VirusTotal Search for analysis
Name 3354de7ed598d8e295ef1175fdd82c22c2865377
Size 165.0KB
Type data
MD5 611e5ab3ad03d2f78df51a57a1071479
SHA1 3354de7ed598d8e295ef1175fdd82c22c2865377
SHA256 5d4a9cbe1b05e21ae4dbb0d58775af6dd9cf650ffccf19257f43ef9e05766ca1
CRC32 C3C8FA3C
ssdeep 3072:GlQ4eZUIK/Fh/ihRgynIOl39S2SJ0vDqnUrEpjlxsYzsg2KZatti2DDIm20aZ9iV:14f/T6hRgynIOl39S2SJ0vDqnUrEpjlg
Yara
  • Malicious_Library_Zero - Malicious_Library
VirusTotal Search for analysis
Name 04a0183e7fd1c548bf7ab5f416625f37b1e2ae65
Size 1.2MB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 cc36a5733639409f40deeffd5058af9b
SHA1 04a0183e7fd1c548bf7ab5f416625f37b1e2ae65
SHA256 54f847273e4e8b1cdaa7215471a25d2c4d9b5348dc8b537a67e2fd5b4e19ca6b
CRC32 8F83E230
ssdeep 24576:0Ozjqd25wxED3ApgbD6tLiXGFsUfk6q70JbkuHPM8qQcfBwm:Tzjq0rD2Smpisk6emP+TWm
Yara
  • Is_DotNET_DLL - (no description)
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name ffe1d8e73a0d4af4a57af2fb63cc5708256b6e06
Size 265.5KB
Type data
MD5 4b186a3196dddb0bd33dc7cdb39cae59
SHA1 ffe1d8e73a0d4af4a57af2fb63cc5708256b6e06
SHA256 5069382f14b2ec1c64db0834dd4bef2e58d45d9a80ad167a4e635f05990aa7d3
CRC32 6214C929
ssdeep 768:xP5IKH/xNKaARdzSfM7kVrtB3b0T/ljm+6H1tvYW56/ApVVVkNW:xf3QT/ljmV1t6gVmNW
Yara None matched
VirusTotal Search for analysis
Name de0952778495020c0b3503827eb815a118663362
Size 454.0KB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 d219f3d7f72e869e0c89ad5278c15156
SHA1 de0952778495020c0b3503827eb815a118663362
SHA256 be073b2e3bc5605c73e8e600f9ae25c516c68dec7d2e960006877f3176ee2a42
CRC32 66A21D11
ssdeep 6144:5JZmhJsyDcglVVkVABMJV0MJV/WTvSUEgdmUBbTVwxnY49Maic2ayQHFkpFrlJg7:AJs0VVSzYqugUBb5wxnEC2ak9P0ZFR
Yara
  • Is_DotNET_DLL - (no description)
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 1361e0435f0f166c01277d35f3a146b142ef19f2
Size 164.5KB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 2173fef5eeaa3a3dedcfa1de2bf62e8b
SHA1 1361e0435f0f166c01277d35f3a146b142ef19f2
SHA256 2e68a24df423c7f6c179ca2374a5f6b3efdffc0525c1bbba20c3a68ec8c029d2
CRC32 986B6040
ssdeep 3072:iOJenJoJuzbQQoNbXU+j2crcerGqh2DX2HVXvh:lEUYQQoNbXU+ZrJz2KHT
Yara
  • UPX_Zero - UPX packed file
  • Win_Trojan_AgentTesla_M_B_Zero - Win Trojan AgentTesla
  • Is_DotNET_EXE - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 1c0bdfa732b4d067dc31bfbeef61f81cade01851
Size 972.0KB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 3f1821124c230120bb0cdb6b69d68999
SHA1 1c0bdfa732b4d067dc31bfbeef61f81cade01851
SHA256 01ba23fd910b095b50be8adaec3573c576c7c921e45aa7063a1920a467a4fb6a
CRC32 6A5D9578
ssdeep 24576:ueufz+QTvLjqLsnt1NNFU2DRw0ChqBJCpCCHyT:uDbNTvLWsnt1Nw+kHi
Yara
  • Is_DotNET_EXE - (no description)
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis