popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

niceclient.exe

AsyncRAT .NET framework(MSIL) UPX Malicious Library Malicious Packer .NET EXE PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 14, 2025, 10:32 a.m. April 14, 2025, 10:35 a.m.
Size 45.0KB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 2c5bd84fc6963be41a892a1ad21bf7e4
SHA256 63dc288d5c16a92532f1a7d9ff0d4cbbb856d274fd51f410d2109e506ef47084
CRC32 476E782D
ssdeep 768:Gu42BT3v1gbWUnUa6mo2qRNITnyfaaPIxzjbkgX3i53I01YoTBDZSx:Gu42BT3Nj2SEhx3brXStrdSx
Yara
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • Is_DotNET_EXE - (no description)
  • AsyncRat - AsyncRat Payload
  • IsPE32 - (no description)
  • Malicious_Packer_Zero - Malicious Packer
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
45.81.115.40 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

host 45.81.115.40
dead_host 45.81.115.40:1951
Bkav W32.AIDetectMalware.CS
Lionic Trojan.Win32.AsyncRAT.m!c
CAT-QuickHeal Trojan.IgenericFC.S14890850
Skyhigh BehavesLike.Win32.Fareit.pm
ALYac Generic.AsyncRAT.Marte.B.53501F96
Cylance Unsafe
VIPRE Generic.AsyncRAT.Marte.B.53501F96
Sangfor Suspicious.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Generic.AsyncRAT.Marte.B.53501F96
K7GW Trojan ( 005c228f1 )
K7AntiVirus Trojan ( 005c228f1 )
Arcabit Generic.AsyncRAT.Marte.B.53501F96
VirIT Trojan.Win32.MSIL_Heur.A
Symantec Backdoor.ASync!g2
Elastic Windows.Generic.Threat
ESET-NOD32 a variant of MSIL/AsyncRAT.A
APEX Malicious
Avast Win32:MalwareX-gen [Drp]
ClamAV Win.Packed.Razy-9625918-0
Kaspersky HEUR:Backdoor.MSIL.Crysan.gen
Alibaba Backdoor:MSIL/AsyncRat.57c1d47b
SUPERAntiSpyware Trojan.Agent/Gen-Kryptik
MicroWorld-eScan Generic.AsyncRAT.Marte.B.53501F96
Rising Trojan.AntiVM!1.CF63 (CLASSIC)
Emsisoft Trojan.Agent (A)
F-Secure Trojan.TR/Dropper.Gen
DrWeb Trojan.Siggen9.56514
Zillya Trojan.Agent.Win32.1828871
TrendMicro Backdoor.MSIL.ASYNCRAT.SMXSR
McAfeeD ti!63DC288D5C16
Trapmine suspicious.low.ml.score
CTX exe.trojan.msil
Sophos Troj/AsyncRat-B
SentinelOne Static AI - Malicious PE
Jiangmin Backdoor.MSIL.gguk
Google Detected
Avira TR/Dropper.Gen
Gridinsoft Trojan.Win32.Agent.sa
Microsoft Backdoor:MSIL/AsyncRat.AD!MTB
ViRobot Backdoor.Win.Z.Asyncrat.46080.AV
ZoneAlarm Troj/AsyncRat-B
GData MSIL.Backdoor.DCRat.D
Varist W32/Samas.B.gen!Eldorado
AhnLab-V3 Malware/Win32.RL_Generic.C3558490
McAfee Fareit-FZT!2C5BD84FC696
DeepInstinct MALICIOUS
VBA32 OScope.Backdoor.MSIL.Crysan
Malwarebytes Generic.Malware.AI.DDS
Ikarus Backdoor.AsyncRat