home

aircrack-ng-1.2-rc-2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.logitheque.com and multiple other hosts.
MD5:
168098905d2257fae7f57d8ef1219697

SHA-1:
2eae1fa0aeba08977b49b876f77f64be79bae38c

SHA-256:
6bcf8a000c77d08b7bc9111983f5de41966e8db65efc873826cdc776f6698291

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/16/2024 12:48:03 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/AirCrack.A.9441
8.3.2.2

AVG
Linux/Hacktool.Aircrack
2016.0.2987

File size:
5.3 MB (5,559,264 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\aircrack-ng-1.2-rc-2.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
98304:hl+lp+lM+VYFF0iW5tVzHAP58UeeyXWwrD2nPcZzpT0BTQtDqfSSEe5IOPwLzvHy:hlzzVYFF/WjVYeeyX12n01polQtDqfL/

Entry point:
50, 4B, 03, 04, 0A, 00, 00, 00, 00, 00, B6, 30, 8A, 46, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 18, 00, 1C, 00, 61, 69, 72, 63, 72, 61, 63, 6B, 2D, 6E, 67, 2D, 31, 2E, 32, 2D, 72, 63, 32, 2D, 77, 69, 6E, 2F, 55, 54, 09, 00, 03, 98, BC, 27, 55, 98, BC, 27, 55, 75, 78, 0B, 00, 01, 04, E8, 03, 03, 00, 04, 01, 02, 03, 00, 50, 4B, 03, 04, 14, 00, 02, 00, 08, 00, DD, 9A, 42, 45, 8E, 95, 05, 37, 54, 00, 00, 00, 78, 00, 00, 00, 22, 00, 1C, 00, 61, 69, 72, 63, 72, 61, 63, 6B, 2D, 6E, 67, 2D, 31, 2E, 32, 2D...
 
[+]

Entropy:
7.9982  (probably packed)

The file aircrack-ng-1.2-rc-2.exe has been seen being distributed by the following 5 URLs.

http://www.logitheque.com/.../97231150.dl

http://dl1.filehippo.com/.../aircrack-ng-1.2-rc2-win.zip?ttl=1467279635&token=b619bbdfdd6999d2f82c4e3f7ea119c6

http://dw4.br.uptodown.com/dw/1444961812/.../aircrack-ng-1-2-rc-2-en-win.zip

http://www.lelogicielgratuit.com/.../97231150.dl

http://download.aircrack-ng.org/aircrack-ng-1.2-rc2-win.zip

Scan aircrack-ng-1.2-rc-2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.