popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

AnimalCrossing2.exe

Generic Malware UPX Malicious Library Malicious Packer PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 14, 2023, 4:08 p.m. Aug. 14, 2023, 4:12 p.m.
Size 38.0MB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 629f8ea6367bc269bd13799d249d7b5c
SHA256 f230fd30ea0ec454711f0616de0811fdf59eeecafbfbbc345568d972891bd9ff
CRC32 4F134D5B
ssdeep 393216:4zJjLG+AqDOPrr5g3EKd7qr12pFd5glhzHwSQ9C1Bm/B7AAtvDlA2L1MoFspkEJ7:4a8aTaxXrLYV6ycrYRaZCL
PDB Path C:\Users\runneradmin\AppData\Local\Temp\pkg.8e00db665f46c6668261ddec\node\out\Release\node.pdb
Yara
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file
  • IsPE64 - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • Generic_Malware_Zero - Generic Malware

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Users\runneradmin\AppData\Local\Temp\pkg.8e00db665f46c6668261ddec\node\out\Release\node.pdb
section _RDATA
Zillya Trojan.Disco.Win32.7725
Kaspersky UDS:DangerousObject.Multi.Generic