Dropped Burrfers

Name	66138688f07cf913ebea1b99cb50aa9be5d01132
Size	59.5KB
Type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`f0cbb5c0a0aa0a135ea4c481660e42fa`
SHA1	`66138688f07cf913ebea1b99cb50aa9be5d01132`
SHA256	`c903b2aafbbe6b586a0ce39e3b2588d72a1ac071a5723771ed9f5b4094825406`
CRC32	`09DA505A`
ssdeep	`1536:Kdb81yIXGb/vwlK8xTI0UP+jRe+2ZqA4iZzaH4Mi8:Kdb81ynIlKesdB+2ZN4iZzYw8`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsConsole - (no description) HasOverlay - Overlay Check HasDebugData - DebugData Check
VirusTotal	Search for analysis

Name	50b14526df4b23015844a497db6f5e9745ef3fc9
Size	394.0KB
Type	data
MD5	`946db8ab39e4cec4faf059fcc3b31692`
SHA1	`50b14526df4b23015844a497db6f5e9745ef3fc9`
SHA256	`79df46ec9038b55212cc61c5ea071fd2df968e2230d422a2557daa241b63addc`
CRC32	`E35EF5F1`
ssdeep	`3072:n7RV+Kc0sDK6txhaZdafeLmCdF/wBo8TnxDpQyFR4HsajDzz6FX:n7jXmdvau2LmSdERnxDhWsajDzGF`
Yara	network_smtp_dotNet - Communications smtp keylogger - Run a keylogger Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal	Search for analysis

Name	50c63d6a6c5c2b5374f6fb221ffc6c3521fe126f
Size	2.6MB
Type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`8aab787afa9083704b365855d0b50bde`
SHA1	`50c63d6a6c5c2b5374f6fb221ffc6c3521fe126f`
SHA256	`7d5863aaf6798ada8c558f3cad8ba44818c5243005cd78c112ae44432be71b1a`
CRC32	`E21CDBDC`
ssdeep	`24576:b+ulpYbDOBpEbDw/vdFGASHGNyFS3ijMumGLUV:b+6YeBWQ/vdQ1HG0Syj1mIUV`
Yara	PE_Header_Zero - PE File Signature Zero screenshot - Take screenshot Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsConsole - (no description) HasOverlay - Overlay Check
VirusTotal	Search for analysis

Name	4a290f26113607fe1edd228b413c78199f080c3f
Size	396.5KB
Type	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`bcb4a8d22aef9a8f175629294006c480`
SHA1	`4a290f26113607fe1edd228b413c78199f080c3f`
SHA256	`5ac5a9dbb80ffeee3c578dbe5a13e648fb5747f515003cc960ffea001ba8bc41`
CRC32	`DE2A30D6`
ssdeep	`3072:S7RV+Kc0sDK6txhaZdafeLmCdF/wBo8TnxDpQyFR4HsajDzz6FXOs:S7jXmdvau2LmSdERnxDhWsajDzGF1`
Yara	PE_Header_Zero - PE File Signature Zero network_smtp_dotNet - Communications smtp keylogger - Run a keylogger Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT IsPE32 - (no description) IsNET_EXE - (no description) IsWindowsGUI - (no description) HasOverlay - Overlay Check
VirusTotal	Search for analysis