popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

ghhjhjhsg.exe

.NET framework(MSIL) Malicious Library UPX PE File OS Processor Check PE32 .NET EXE
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 5, 2024, 11:37 p.m. April 5, 2024, 11:37 p.m.
Size 3.1MB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 96f1a72749b4abe9f92e364dcd059dcb
SHA256 996e8d1afc74090b75f936ca57b1570de64dff0dbcdbffa411f9f6ed814fc43f
CRC32 4FB92CAD
ssdeep 49152:Cvkt62XlaSFNWPjljiFa2RoUYIbD0G2LoGdiPTHHB72eh2NT:Cv462XlaSFNWPjljiFXRoUYIbD0G4
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Is_DotNET_EXE - (no description)
  • IsPE32 - (no description)
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

No signatures