Dropped Burrfers | ZeroBOX
Name d789d39f6588fcece25be49ac2fc9b78afd5f19c
Size 214.0KB
Type data
MD5 0325f6fa2460602753004c958bc2bebc
SHA1 d789d39f6588fcece25be49ac2fc9b78afd5f19c
SHA256 79cab85a6e6afbb2090134a1e1e66e2d646050c0a1d072d24f5a1dfbc9974cb4
CRC32 4AAB3A41
ssdeep 3072:1bUgInh99eBsyiQGRxUs11ekeWmaAotkR6CFtlmeA5GN7cz4EKEIbI4Hvgp0XItC:vBsyo3UVk7mnR7tlhP/OWXHvgpMcUS
Yara
  • network_smtp_dotNet - Communications smtp
  • keylogger - Run a keylogger
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
VirusTotal Search for analysis
Name 66138688f07cf913ebea1b99cb50aa9be5d01132
Size 59.5KB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 f0cbb5c0a0aa0a135ea4c481660e42fa
SHA1 66138688f07cf913ebea1b99cb50aa9be5d01132
SHA256 c903b2aafbbe6b586a0ce39e3b2588d72a1ac071a5723771ed9f5b4094825406
CRC32 09DA505A
ssdeep 1536:Kdb81yIXGb/vwlK8xTI0UP+jRe+2ZqA4iZzaH4Mi8:Kdb81ynIlKesdB+2ZN4iZzYw8
Yara
  • PE_Header_Zero - PE File Signature Zero
  • IsPE32 - (no description)
  • IsNET_DLL - (no description)
  • IsDLL - (no description)
  • IsConsole - (no description)
  • HasOverlay - Overlay Check
  • HasDebugData - DebugData Check
VirusTotal Search for analysis
Name cd4ea5c8abbb691b0ab704c99d18a75277d2884b
Size 2.4MB
Type PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 49ee5249d3eeb082a7dcb22349e2e4e8
SHA1 cd4ea5c8abbb691b0ab704c99d18a75277d2884b
SHA256 7c2a5846ba71958420993942e4bd2b44a53ffa2607e8f09c219df49bb1e1862d
CRC32 AEB9401D
ssdeep 24576:A+ulpYbDOBpEbDw/vdFGASaaOtTY9OJ9z62:A+6YeBWQ/vdQ1antT2Yd62
Yara
  • PE_Header_Zero - PE File Signature Zero
  • screenshot - Take screenshot
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
  • IsPE32 - (no description)
  • IsNET_DLL - (no description)
  • IsDLL - (no description)
  • IsConsole - (no description)
  • HasOverlay - Overlay Check
VirusTotal Search for analysis
Name ce696e2a467318fb557d1c2b4b3ecd89193ca833
Size 216.5KB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 bca5f7fa491cda7c707b4b715d0a26a5
SHA1 ce696e2a467318fb557d1c2b4b3ecd89193ca833
SHA256 f4b69801c2024b61139ef3647ea16c60c6eea07954b9451b4c16f884a20ce463
CRC32 8BAEBC11
ssdeep 3072:IbUgInh99eBsyiQGRxUs11ekeWmaAotkR6CFtlmeA5GN7cz4EKEIbI4Hvgp0XItM:oBsyo3UVk7mnR7tlhP/OWXHvgpMcUSc
Yara
  • PE_Header_Zero - PE File Signature Zero
  • network_smtp_dotNet - Communications smtp
  • keylogger - Run a keylogger
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
  • IsPE32 - (no description)
  • IsNET_EXE - (no description)
  • IsWindowsGUI - (no description)
  • HasOverlay - Overlay Check
VirusTotal Search for analysis