popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

rev 0B744B7667EF335CB32CEA7A9E4FFC02.txt

RedLine stealer Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library Anti_VM OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 11, 2023, 4 a.m. Aug. 11, 2023, 4 a.m.
Size 96.1MB
Type data
MD5 d355dd22f9d71b1b9bce9b03771c7f26
SHA256 56c504a737ab28a59e8406e99bc5ef9d9ad54251cd34de44c47363896e2fe9e4
CRC32 35270462
ssdeep 1572864:vN/bNnHSSLmyNHQgAb+k8m585ifjGVZ2dalm1offZb4UH+dsLeWQkDf6i/y6Dmsg:U
Yara
  • OS_Processor_Check_Zero - OS Processor Check
  • anti_vm_detect - Possibly employs anti-virtualization techniques
  • Malicious_Library_Zero - Malicious_Library
  • RedLine_Stealer_b_Zero - RedLine stealer
  • Admin_Tool_IN_Zero - Admin Tool Sysinternals
  • Generic_Malware_Zero - Generic Malware

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

No signatures