Summary | ZeroBOX

StealerClient_Cpp.exe

Malicious Library UPX Malicious Packer PE File OS Processor Check PE32
Category Machine Started Completed
FILE s1_win7_x6401 Nov. 7, 2023, 7:03 p.m. Nov. 7, 2023, 7:07 p.m.
Size 1.3MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 0e149c713146c9c1ea53d7b7fa3b39e1
SHA256 2f5370312110028e933cdcb12b331523010b79293fc924ec3ff316ffcafdef23
CRC32 5FF57BBE
ssdeep 24576:MF9uwNfSKYFODIbxDtU9jyuSmsLNvwqsbQJWBMFbSFv/XsTRY+9W54KycnnC3:qgKal12UpkbQJW2FbSFXXsTv9W54Kycm
Yara
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

No signatures