Summary | ZeroBOX

FVr.xls

PE32 .NET DLL PE File DLL
Category Machine Started Completed
FILE s1_win7_x6401 April 3, 2024, 1:38 p.m. April 3, 2024, 1:41 p.m.
Size 63.5KB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 7ed6ac58a23ab36e89c5516c56af920d
SHA256 cad22ca41d730a37e6c581dc61dce32c1385c80f386ced8e7747cbcf0fc4b347
CRC32 08434C04
ssdeep 768:VV8/15Ej6pYqYznsRCsivJ8ZoHYB6t9QtS/oopjQBI4rH6Cq2f4UHy2:PKrEuTanHx0o4B6gtS/oMRc/
PDB Path ClassLibrary2.pdb
Yara
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • IsPE32 - (no description)
  • Is_DotNET_DLL - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch
193.233.132.67 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path ClassLibrary2.pdb
host 193.233.132.67
Bkav W32.Common.747C2566
Lionic Trojan.Win32.Loader.4!c
CAT-QuickHeal Trojan.MSIL
Skyhigh Artemis
ALYac Gen:Variant.Johnnie.192253
Cylance unsafe
VIPRE Gen:Variant.Johnnie.192253
Sangfor Trojan.Win32.Loader.Vhd1
CrowdStrike win/malicious_confidence_70% (W)
BitDefender Gen:Variant.Johnnie.192253
Arcabit Trojan.Johnnie.D2EEFD
Symantec Trojan.Gen.2
Elastic malicious (high confidence)
McAfee Artemis!7ED6AC58A23A
Avast Win32:TrojanX-gen [Trj]
Kaspersky HEUR:Trojan.MSIL.Loader.gen
Alibaba Trojan:MSIL/Loader.a9699a2f
MicroWorld-eScan Gen:Variant.Johnnie.192253
Rising Malware.Obfus/MSIL@AI.81 (RDM.MSIL2:H+UcwLafN7q3IFbFEUuIsQ)
Emsisoft Gen:Variant.Johnnie.192253 (B)
F-Secure Trojan.TR/Redcap.aaajxz
FireEye Gen:Variant.Johnnie.192253
Sophos Mal/Generic-S
Avira TR/Redcap.aaajxz
MAX malware (ai score=87)
Antiy-AVL Trojan/MSIL.Loader
Kingsoft MSIL.Trojan.Loader.gen
Microsoft Trojan:Win32/Wacatac.B!ml
ViRobot Trojan.Win.Z.Johnnie.65024
ZoneAlarm HEUR:Trojan.MSIL.Loader.gen
GData Gen:Variant.Johnnie.192253
AhnLab-V3 Trojan/Win.Generic.C5604222
DeepInstinct MALICIOUS
Panda Trj/Chgt.AD
TrendMicro-HouseCall TROJ_GEN.R002H07CU24
MaxSecure Trojan.Malware.187912708.susgen
Fortinet W32/PossibleThreat
AVG Win32:TrojanX-gen [Trj]
alibabacloud Trojan:MSIL/Loader.gen