home

bws_ssh_murah_inject_isat.exe

MD5:
42f0d6526c092d36ac6add8753e40f09

SHA-1:
65cec808bd9fbd2be216206a4fd236e7cab91c54

SHA-256:
989094ef8d66288216705d9b61253a029fea5b7f71d969711860e8e1c5067b50

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:36:07 PM UTC  (today)

File size:
1.2 MB (1,216,512 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:ytWK1umrpWDAvJd78z5kSZUO2Yo7EA9m6+5sVELKT:LKg+wz6wXo4A+SjT

Entry address:
0x1000C0

Entry point:
55, 8B, EC, 83, C4, F0, B8, 88, FB, 4F, 00, E8, BC, 64, F0, FF, A1, 34, 63, 50, 00, 8B, 00, E8, F8, 11, F6, FF, 8B, 0D, BC, 64, 50, 00, A1, 34, 63, 50, 00, 8B, 00, 8B, 15, B8, ED, 4F, 00, E8, F8, 11, F6, FF, A1, 34, 63, 50, 00, 8B, 00, E8, 6C, 12, F6, FF, E8, 1B, 40, F0, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6513

Developed / compiled with:
Microsoft Visual C++

Code size:
1020.5 KB (1,044,992 bytes)

Windows Firewall Allowed Program
Name:
bws_ssh_murah_inject_isat


The file bws_ssh_murah_inject_isat.exe has been seen being distributed by the following URL.

https://s02.solidfilesusercontent.com/MWRhZjNiYjIwMmI4M2FjZDc2MzcyZTczNjYxM2FmM2IxZmFmYTVlODoxWlJwOTI6cVFmVDNaZDhrbWp6bTJKSVVaQXZGeXlQSUxz/.../BWS_SSH_MURAH_INJECT_ISAT.exe

Scan bws_ssh_murah_inject_isat.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.