popup
Dropped Burrfers | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Dropped Buffers

Name e9c47a4432343b559702d0406653df8ddb5201bb
Size 4.4KB
Type ASCII text, with very long lines, with no line terminators
MD5 67c5ea368c814f27d4f0efb1b5fe6b4d
SHA1 e9c47a4432343b559702d0406653df8ddb5201bb
SHA256 aea1fdfa9b78f1fcad2d897abfb9203b65a1ea4dadea2fb7c9f038bad453e4fc
CRC32 3B200DBF
ssdeep 96:UHcKSlZLPAkr9VfzXv0kFOAV1XvZOlzNHxFn+4+hdde:UHT0lxFvVdvZO9DF6te
Yara
  • Suspicious_Obfuscation_Script_2 - Suspicious obfuscation script (e.g. executable files)
VirusTotal Search for analysis
Name 8b76eff8152be7ab17a1ca233e7abda1778f7dcd
Size 79.5KB
Type data
MD5 f7ca0b843548595bf64e8c2b3da0d10a
SHA1 8b76eff8152be7ab17a1ca233e7abda1778f7dcd
SHA256 2504d3aebd2ca42086ae974ca082adbb8cdaf7b9d3e5d0a7a4bd5d30fd90e60a
CRC32 497BF5B7
ssdeep 1536:xdIta6kMJb4zR99MaG+zKPSG5MaQ14TqaqWh/9ufzz:cTHo9rG8KaG5jnTqaqAufzz
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Win_Trojan_AgentTesla_M_B_Zero - Win Trojan AgentTesla
VirusTotal Search for analysis
Name 0a2410023a5e319e146aa4caec97c40b1260b58e
Size 236.5KB
Type data
MD5 028dfd0e5363e1a9073a5c41b7251e5c
SHA1 0a2410023a5e319e146aa4caec97c40b1260b58e
SHA256 3758294f53b8d4bd19c53b24f9e58ca42b7686201189339f1b084c1fa45a5ffb
CRC32 55527AE1
ssdeep 3072:m6hjdyqayixAAP3cbER54nITHo9rG8KaG5jnTqaq:vhhyqayiGByhsq8KaWTB
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Win_Trojan_AgentTesla_M_B_Zero - Win Trojan AgentTesla
VirusTotal Search for analysis
Name c121763713f097c43f3ee5f5b7bde32d923e32e8
Size 8.0KB
Type ASCII text, with very long lines, with no line terminators
MD5 c35e6d4fd72c96fffea18f7cc7a08d84
SHA1 c121763713f097c43f3ee5f5b7bde32d923e32e8
SHA256 83a230880a36d41bf60339998e7638a13d540deec1d0856d47414d8a325d91b1
CRC32 F34E74B9
ssdeep 192:sGDXH68n4+g7YOu1fTe9hgQnkQ2d5ZwFMI53qkIrBqFkds:PDX3XTfTesPuarsss
Yara
  • Suspicious_Obfuscation_Script_2 - Suspicious obfuscation script (e.g. executable files)
VirusTotal Search for analysis
Name 6bfcfca4e1426694838a8ca2e27614954b5a57f6
Size 33.2KB
Type ASCII text, with very long lines, with no line terminators
MD5 5c3641ed6231f6b8eafcc7487ca60bf4
SHA1 6bfcfca4e1426694838a8ca2e27614954b5a57f6
SHA256 4995ce5defe09a249556ffaa8b17d5508abe1e9fdbb28da794122213dccb2043
CRC32 FC0382A9
ssdeep 768:KrmqNDiyX1UKYphZ2TDo9LUp4pH8TgOPHUs7RV95vOyq3:gnX1UrphgTE9LcSHlOPH9T952ym
Yara None matched
VirusTotal Search for analysis
Name ad9fac8d2f87bb9f8ed22eedc1213e75b79ab81b
Size 35.6KB
Type ASCII text, with very long lines, with no line terminators
MD5 60cd29cdfeef65d13fcb3d5081a4694e
SHA1 ad9fac8d2f87bb9f8ed22eedc1213e75b79ab81b
SHA256 fa276896a689e5ceb6e56a19ecdf6cb4d32b1127931a0b0eca6cc767e86c3cd2
CRC32 2B06F94A
ssdeep 768:LFqXrRI1WR3yrvfw7DzRTEsliIL3mgesHHQcBYtiiMQU:M9lIfw7PBEsP7m8wcBUNMn
Yara None matched
VirusTotal Search for analysis
Name 425f6594311e786985dcd7d69242d1f89a9abe43
Size 12.8KB
Type ASCII text, with very long lines, with no line terminators
MD5 74859aaf7b7d8d82ca8e1dca340a1729
SHA1 425f6594311e786985dcd7d69242d1f89a9abe43
SHA256 11392584b35d50dbb2be2cdc5a39c99c730a38ebda8c1bcc1a5eb57add9e0275
CRC32 DC4D1952
ssdeep 384:DozNcJRfPl/xvloWpdVkWdKyfxEdGY17fqo25F6:czORl/xyW13dKya4qfqo25Y
Yara None matched
VirusTotal Search for analysis
Name 2e6837cdafd1f761d31ecbdbcab89e67c1b18420
Size 80.0KB
Type data
MD5 e9a84e178ed249529f264d7951d42296
SHA1 2e6837cdafd1f761d31ecbdbcab89e67c1b18420
SHA256 1e8eee4cb1c6739995ed1bebe39b2f27c3a45d56485e041a5c804c7932010020
CRC32 D24C5E6C
ssdeep 768:4CpDCfCErSUn6V3diGOHPsIw40BfOcDky9vtqXUe0/UG+zAajJ+NMxHOTeZSObC2:Bp2btCRhUoeZnF
Yara None matched
VirusTotal Search for analysis
Name 88616e0230c0d53715067bef5b35cc5fccc5a962
Size 8.6KB
Type ASCII text, with very long lines, with no line terminators
MD5 d0d3a18a0f0baab77a6edc777ae7d271
SHA1 88616e0230c0d53715067bef5b35cc5fccc5a962
SHA256 c23611887d805c15136f7ec3d8e76a7d4a2e6f220228b67550ff8546a9210697
CRC32 A4E02A6D
ssdeep 192:vMiywPRRiBj9dbAn9ACu2sgWL7ru6hB3osQ8XZLLNONIavASQr:vLziBjTbWA9nru8BFBFQPNK
Yara None matched
VirusTotal Search for analysis
Name 84c7c22f0252574c30de398fa8da429e6020c29f
Size 80.0KB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 0ef3d9ae1d6cef35f8b2b56f48e26f73
SHA1 84c7c22f0252574c30de398fa8da429e6020c29f
SHA256 fa6ed7a8be2d8d9436955f3c03d29fecbe241b3e07176a6036122e57a61e10d0
CRC32 B7260147
ssdeep 768:5TFzjsQC/GWlAQzIOOXUUsUhjdyqayiAkruf4b4D1NjkrPR:5WQilSDhjdyqayixA+rPR
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
VirusTotal Search for analysis
Name 7d3ba5bd8f41a6d2f3ac45bc3fe84e9e24126b1c
Size 5.7KB
Type ASCII text, with very long lines, with no line terminators
MD5 c69db751fb70ca2815347e333ab630d8
SHA1 7d3ba5bd8f41a6d2f3ac45bc3fe84e9e24126b1c
SHA256 5c67eb523b9ebd422ab317a230209f0ddc0e8c51495a90814b492df2e47d919c
CRC32 E4276A38
ssdeep 96:I/CEzq6M2ypI+ZgIwsdKExc8fI9PhfXOivm4QIiC8piuvISq+ZIAlP06aOtXX:JEzq6M2ypjgidKE6zZfXvv8I4iAFpiUb
Yara
  • Suspicious_Obfuscation_Script_2 - Suspicious obfuscation script (e.g. executable files)
VirusTotal Search for analysis
Name d52bc2b4265bd163ee1389249005204fbd637c25
Size 8.8KB
Type ASCII text, with very long lines, with no line terminators
MD5 3b1c65b8839218f207d1faa09023ec97
SHA1 d52bc2b4265bd163ee1389249005204fbd637c25
SHA256 4ea55a11e9b6d727ee1aa7934b1cdaeccf3aa92e9dc3644d2c726873186e1f08
CRC32 53A8D2DD
ssdeep 192:KboXMXl5pXK+5nCLwfG/ke6qwxcymO4Dz7xMc2ug0M1WX85YyAlw:KbdXfpX0N/d6qwxcymO4OP1WDy5
Yara None matched
VirusTotal Search for analysis