Dropped Burrfers | ZeroBOX

Favorites
Tools
Dr.Zero Chatbot
Notifications
Guide 2020-06-10
Version history 2020-06-10

latestReport
09.22 06:09
audiodg.exe
09.22 06:09
psfod.exe
09.22 06:09
73EtsZxIoDetWTu.exe
09.22 06:09
otqp9.exe
09.22 06:09
xx.exe
09.22 06:09
fck.exe
09.22 06:09
LummaC222222.exe
09.22 06:09
seethebestwayforunders...
09.22 06:09
Name.exe
09.22 06:09
needmoney.exe

Latest News
09.23 08:09
A Mercedes-Benz Fire M...
09.23 08:09
IT Sicherheitsnews woc...
09.23 08:09
IT Sicherheitsnews tae...
09.23 08:09
컬러풀대구 웨딩박람회, 오는 10월 엑스...
09.23 08:09
3D Printing a Wire-Wra...
09.23 07:09
Three Media Moguls Are...
09.23 07:09
Harris Vows to Grow AI...
09.23 07:09
September 23, 2024
09.23 06:09
Apollo to Offer Multib...
09.23 05:09
The Russian APT Tool M...

Dropped Burrfers | ZeroBOX

Name	8b49763ee4b6543f3d13bfa23e6c51632dd16323
Size	117.5KB
Type	data
MD5	`04b7b8957d5626c451c62c1437591939`
SHA1	`8b49763ee4b6543f3d13bfa23e6c51632dd16323`
SHA256	`2edb79445aef43279d5475336618985cc63128b86f802d398c7cd5b044dec551`
CRC32	`6E728D21`
ssdeep	`3072:yvB1DspJAAztIa6+NnI3A4216EdkMJ6rliMsLfQtMe2bn2te:yvBNQu+IqNnI3ARNdkF4MMoty72M`
Yara	None matched
VirusTotal	Search for analysis

Name	636b8187f0cb59d43c9ee1eedf144043941b62d9
Size	161.5KB
Type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`5f811de9c87dff3815974880168f9f54`
SHA1	`636b8187f0cb59d43c9ee1eedf144043941b62d9`
SHA256	`3d319d2fa51b58429b682b3bd8f18cb237dfa1780a488141f24e8ca009a8f732`
CRC32	`7DC0E500`
ssdeep	`3072:zmwMZu0uGUZbaV615xZ3gHW3nqIy+IYeRp2cpWsGRlKDYJ:z6ZubGUZJDxKHW3fXEpIl`
Yara	PE_Header_Zero - PE File Signature Zero sniff_audio - Record Audio IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsConsole - (no description)
VirusTotal	Search for analysis

Name	24db5f9c512fafab7f81ca87a74877deea8e313c
Size	300.5KB
Type	data
MD5	`2609728e9d87ecc47ea1e30df0c4e951`
SHA1	`24db5f9c512fafab7f81ca87a74877deea8e313c`
SHA256	`4891917bfd6eb75dd6a58b137d9a9e9cac9552a3d212eb9f65584383dba7a670`
CRC32	`F832D555`
ssdeep	`6144:3gOcBw1ykkx30tIRaBLSMIx+VO+zKyN3WOIPXLHwGgS++oVUUoG:wOc/N0twMI4VO+eUdG3++oVUUR`
Yara	None matched
VirusTotal	Search for analysis

Name	4380fb6de89a7776d52214359ce213d24a2239ad
Size	21.0KB
Type	PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`2c72cad8dff49c583d870fc6282980dd`
SHA1	`4380fb6de89a7776d52214359ce213d24a2239ad`
SHA256	`5dd4c1ca1f3e9283ff33f6c85ddf0a9630c863599f812549313c35c45dbcafe7`
CRC32	`6C6C4494`
ssdeep	`192:8u9bEWqG1qYpZVUnlYJL/eYaCpLprK6UtN5o:8MbN3jrqYa2Lp9Q5`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsWindowsGUI - (no description) HasDebugData - DebugData Check
VirusTotal	Search for analysis

Name	c19d9db351af75fec019fe76506a455eba7fd168
Size	57.0KB
Type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`36cf6fc7f7d048755ddeace5a0a102ed`
SHA1	`c19d9db351af75fec019fe76506a455eba7fd168`
SHA256	`ccea8cede491e63527c0596d38f490fe4a170b93a0af41d13b8136a020f76762`
CRC32	`CB39BD3A`
ssdeep	`768:Vp1KgX+TZMbpsN7Sd5JSnuU0NjWS3jhxIxvXETCYH2EeSudk:Vp1Zu2z5RjWchqxv0+abeSp`
Yara	PE_Header_Zero - PE File Signature Zero network_dns - Communications use DNS IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsConsole - (no description)
VirusTotal	Search for analysis

Name	fa1a797757eb26a7b40c3e351ac08fce73bb4b48
Size	320.3KB
Type	data
MD5	`c3c109bf8dda49f340f069513cdbab29`
SHA1	`fa1a797757eb26a7b40c3e351ac08fce73bb4b48`
SHA256	`37a54707d5f20bd8ebe22fb41b147352c5ec29a41a39a18f48d68a3200d7bcbc`
CRC32	`89354CF5`
ssdeep	`6144:TiT20rA+ZDZlP2ChAr1F3MD374u5GkLllXQoJ6s+2:TiT28A+LxmFG37l/LHXd`
Yara	None matched
VirusTotal	Search for analysis

Name	ea9fbdb6e3db1481e218df0222a21963459edb14
Size	114.0KB
Type	data
MD5	`6bffb4677fa145c3d17cf50e543b74cb`
SHA1	`ea9fbdb6e3db1481e218df0222a21963459edb14`
SHA256	`7d2e842d91a0ee322c40ea8a8acb5ba7969036280547dec6ba1f1c2457c6edd3`
CRC32	`2ACA9C87`
ssdeep	`3072:jzEqV6B1jHa6dtJ10jgvzcgi+oG/j9iaMP2s/HII:jLV6Bta6dtJmakIM5`
Yara	network_dns - Communications use DNS win_registry - Affect system registries
VirusTotal	Search for analysis

Name	c1ef2ca62189121934d1a7944ef1bdc1aa319877
Size	49.0KB
Type	PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`de880274dcd7ec3ebf4e61e843662be3`
SHA1	`c1ef2ca62189121934d1a7944ef1bdc1aa319877`
SHA256	`a3f88dac778d3c59e7157ee9fe6a5133ac89708795caad1c83f98f725e6d800e`
CRC32	`BC31FC04`
ssdeep	`768:FDxO+dUh5OOqulVgD/hB8RcjN6HHmHHSA2SscBjh0TdC6Zu:DOI4cOqegDJB8RaYJijh0dbU`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsWindowsGUI - (no description) HasDebugData - DebugData Check
VirusTotal	Search for analysis

Name	063fb8b27c0872c54bff35e2b76d8f522e13f8b4
Size	27.5KB
Type	PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`603f7ddc535d2d99f9aae77274e4cffb`
SHA1	`063fb8b27c0872c54bff35e2b76d8f522e13f8b4`
SHA256	`d16793e3afc03f5ca8a27a2554c686eb42f028e52a9694948160ae17ccec7fd3`
CRC32	`9CC8EC76`
ssdeep	`384:5v1I2edIVGAVhtTig6kjIqqaNR+nLRES9aWfw:k2edIVFtTiHk80NTS9bfw`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsWindowsGUI - (no description) HasDebugData - DebugData Check
VirusTotal	Search for analysis

Name	925c5236c59dd8f3efea4b3e091ef735b405a880
Size	22.5KB
Type	PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`d9ac251618ec2f76a8fa0f6fb526fb31`
SHA1	`925c5236c59dd8f3efea4b3e091ef735b405a880`
SHA256	`dfc5c5bbd9aabc3154fd185adc48aa9a6558ffee4ce6f9005118eeba6dd8c3ed`
CRC32	`305BF808`
ssdeep	`192:77xfEWL+zT7UYAZVPJnlYJL/e+vNI3LRqltIYg:7tcTTWoqO4LRap`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsWindowsGUI - (no description) HasDebugData - DebugData Check
VirusTotal	Search for analysis

Name	c54e7c5cac5fac68dc564ce64355d948422bf1ce
Size	57.0KB
Type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`b7fc2e10abaeb174f02fe10f533ec741`
SHA1	`c54e7c5cac5fac68dc564ce64355d948422bf1ce`
SHA256	`adafa8b32a00b8947e2b7ca09fc8e7b2392f02d87e825428af533204c395a3b7`
CRC32	`AC35345F`
ssdeep	`1536:hgy4QwPX4K1YuF/QqstZM9RYvBg7nrmv1:6y4Q+X4K1H/QDZM9qvBmrmv1`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsConsole - (no description)
VirusTotal	Search for analysis

Name	105e96d6f8ef91b667cd153e74d435fa49397718
Size	63.5KB
Type	data
MD5	`de0f071684227bb329b8366fe2ea8f42`
SHA1	`105e96d6f8ef91b667cd153e74d435fa49397718`
SHA256	`8586a8a9355edaa315172f9592694abcd7da043a8fb64268acb2a8ce6052491f`
CRC32	`B46E272E`
ssdeep	`1536:nN/6oyl7kXhVjm4kiBJnQi5D93IFSnxA84piDv+wwpqF:nNSoo7atuiBJIFC40atp4`
Yara	None matched
VirusTotal	Search for analysis

Name	dcdec0ea839844e977c1151d2eeedbb0788a34b1
Size	35.5KB
Type	PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`189d32136482ced3d7f9743aa312ad50`
SHA1	`dcdec0ea839844e977c1151d2eeedbb0788a34b1`
SHA256	`b1012e64e562663d7616bcb59a2b53af8f8fb7f04a564631967d4731df357a5c`
CRC32	`B3A360D5`
ssdeep	`384:GPa4E31ZO/7w8QF/Q18tePCO66Nt6XgqUZNADLRIaM494kvN2:T4E37s0F47NokNMD4kvN2`
Yara	PE_Header_Zero - PE File Signature Zero network_dns - Communications use DNS IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsWindowsGUI - (no description) HasDebugData - DebugData Check
VirusTotal	Search for analysis

Name	0c6598a0a37eaf12ce188fa66bc6c5db394af8a4
Size	48.5KB
Type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`78f7c326ea2dbd0eb08de790d6e4bd19`
SHA1	`0c6598a0a37eaf12ce188fa66bc6c5db394af8a4`
SHA256	`ef2435c30f498d6af69a2843e44797203048ef6799965f8d9fe54bfc67a4560b`
CRC32	`DEE1EEE6`
ssdeep	`768:OOEtx7dgsj5hxRwgckPOcZN52QxDjkmamzchhumGHtkoEQEZ:27pNhxRwgnB2QxjkmzUhZGmoEQ4`
Yara	PE_Header_Zero - PE File Signature Zero escalate_priv - Escalade priviledges win_registry - Affect system registries win_token - Affect system token IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsConsole - (no description)
VirusTotal	Search for analysis

Name	874b7c3c97cc5b13b9dd172fec5a54bc1f258005
Size	19.5KB
Type	PE32 executable (DLL) (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`bdc8945f1d799c845408522e372d1dbd`
SHA1	`874b7c3c97cc5b13b9dd172fec5a54bc1f258005`
SHA256	`61e9d5c0727665e9ef3f328141397be47c65ed11ab621c644b5bbf1d67138403`
CRC32	`BE3B83AB`
ssdeep	`192:VYLQui6h6p5WW3tZVTnlYJL/eLYLTr2/C8:VYLQu/6/fKqLYLTR`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsWindowsGUI - (no description)
VirusTotal	Search for analysis

Name	2127db64d33d2183b648328d027cbd326c0ab7bf
Size	117.0KB
Type	data
MD5	`e29aee5f6d78ca695147585008bdbca3`
SHA1	`2127db64d33d2183b648328d027cbd326c0ab7bf`
SHA256	`ebc06cbe30650bbfbbad377e473066b69ec9c130278da0708c7be492d263e767`
CRC32	`EC3B69F3`
ssdeep	`3072:MDvLinEoxq1mdEtnoM0soblz/F3sR5IfHiDOi7ZJW:MDDinIm4nJ1o/3sTUiDOkW`
Yara	None matched
VirusTotal	Search for analysis

Name	efa4948abb218e47d809bedd1aff08cfb76d40e1
Size	36.5KB
Type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`39c8185da53fbe588136525f1654d8f3`
SHA1	`efa4948abb218e47d809bedd1aff08cfb76d40e1`
SHA256	`8c9b3ce8b8970caac3a5fef9f36b3f6c14d32a5802110188f29b810c09945f2f`
CRC32	`5EC8A962`
ssdeep	`384:hhBrCq16ZPMVbsjjW2XtIVPYuTJy9haYV5mnGUuCsNRusDJ5K8:f1FoPMdsjjW2dYLM5EGPZRuUJk8`
Yara	PE_Header_Zero - PE File Signature Zero IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsConsole - (no description)
VirusTotal	Search for analysis

Name	1b68e773e3522fa8edc7cb20d7c7f156b08ec73a
Size	81.5KB
Type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`7283fa19fa6af23c6469976b67c00156`
SHA1	`1b68e773e3522fa8edc7cb20d7c7f156b08ec73a`
SHA256	`fc047a52db3a4aadc47fbc8f72ab671817df327817b60ec15240f135661e078e`
CRC32	`9C80A01D`
ssdeep	`1536:Fgzz1h6aW2dEG61AGfrHeZ1vxJHQhzGIIysksO9PRqJ2YWw2JokBBXyXuAG3f:Fg1AavflmrO1vrHQhzGINJl9PvYNMou3`
Yara	PE_Header_Zero - PE File Signature Zero OS_Processor_Check_Zero - OS Processor Check Signature Zero IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsConsole - (no description)
VirusTotal	Search for analysis

Name	874f3caf663265f7dd18fb565d91b7d915031251
Size	98.0KB
Type	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
MD5	`9c8242440c47a4f1ce2e47df3c3ddd28`
SHA1	`874f3caf663265f7dd18fb565d91b7d915031251`
SHA256	`01e3b18bd63981decb384f558f0321346c3334bb6e6f97c31c6c95c4ab2fe354`
CRC32	`EDEEDF40`
ssdeep	`3072:2m7DYfm4SRR+NaVEs+k6kiS+94ERR6gR0bRbD:2IoIRRGaVExfd`
Yara	PE_Header_Zero - PE File Signature Zero keylogger - Run a keylogger IsPE32 - (no description) IsNET_DLL - (no description) IsDLL - (no description) IsConsole - (no description)
VirusTotal	Search for analysis