Summary | ZeroBOX

styles__ltr.css

ScreenShot AntiVM AntiDebug CAPTCHA
Category Machine Started Completed
FILE s1_win7_x6401 May 2, 2025, 2:52 a.m. May 2, 2025, 2:54 a.m.
Size 76.8KB
Type ASCII text, with very long lines, with no line terminators
MD5 437c1427874117133b1b689954717e1f
SHA256 58c977f54c8a264a97b1508fea7a3f7248c8a0d1da4b29062a30cdfcbb550c97
CRC32 DC91A971
ssdeep 1536:ZfGNbFoZJSUYOOaLnAW8+IcTOIAawthXwW5vx7:pGRFauOxLA/+IcTOtLX9
Yara
  • CAPTCHA_script - CAPTCHA script

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
142.250.197.1 Active Moloch
142.250.71.206 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

1 1 0
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

process_identifier: 2692
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x733c2000
process_handle: 0xffffffff
1 0 0
description Take ScreenShot rule ScreenShot
description (no description) rule DebuggerCheck__GlobalFlags
description (no description) rule DebuggerCheck__QueryInfo
description (no description) rule DebuggerHiding__Thread
description (no description) rule DebuggerHiding__Active
description (no description) rule ThreadControl__Context
description (no description) rule SEH__vectored
description Checks if being debugged rule anti_dbg
description Bypass DEP rule disable_dep
host 142.250.197.1
host 142.250.71.206