home

exploit.dll

MD5:
0adccaae501c242022419782040140a1

SHA-1:
7fe8497c163322496dc63f06e95524d4f3ae7dcc

SHA-256:
c7cb079d2ced2730e678afbdb57fcfc194845da931933a2a83ac33ec4af948ad

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:57:39 AM UTC  (today)

File size:
194 KB (198,656 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\downloads\exploit.dll

File PE Metadata
Compilation timestamp:
4/1/2016 1:05:26 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:Ecw/AKsoWN4OrqiwVVF2nOEC0DpX6pOa:ET/AKVo4Orqim0DpX

Entry address:
0x117A8

Entry point:
E9, 53, CA, 01, 00, E9, D4, C3, 01, 00, E9, 01, E5, 01, 00, E9, FA, C3, 01, 00, E9, 4F, CD, 01, 00, E9, 6A, 75, 01, 00, E9, 05, 9A, 01, 00, E9, EC, BC, 01, 00, E9, 5B, 92, 00, 00, E9, 66, C4, 01, 00, E9, C1, FE, 00, 00, E9, 8A, BC, 01, 00, E9, 2D, C0, 01, 00, E9, 16, C0, 01, 00, E9, AD, 2F, 01, 00, E9, F8, C9, 01, 00, E9, D7, BC, 01, 00, E9, AE, EA, 00, 00, E9, 99, 68, 01, 00, E9, 74, 93, 00, 00, E9, 3F, 8C, 01, 00, E9, DA, 95, 01, 00, E9, 65, 6F, 01, 00, E9, 20, F2, 00, 00, E9, 87, E4, 01, 00, E9, 0E, BC...
 
[+]

Entropy:
5.2980

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
147.5 KB (151,040 bytes)

The file exploit.dll has been seen being distributed by the following 12 URLs.

blob:0792A0D8-556C-4C52-961F-AF1728C40DEC

blob:B112C469-4AAE-49C2-BDEB-0D953757353C

http://download1650.mediafire.com/9014dx09fkng/.../PROJECT TERAPHYX V3.dll

https://mega.nz/temporary/.../JNNkFbCT

https://mega.nz/temporary/.../OgYH0TKB

http://download953.mediafire.com/bb4ka4yxp1hg/.../PROJECT TERAPHYX V3.dll

https://mega.nz/persistent/.../DM8kCCzJ

http://download953.mediafire.com/nmaq9wirtk5g/.../PROJECT TERAPHYX V3.dll

http://www.filedropper.com/.../filedownload.php?id=projectteraphyx

https://www.dropbox.com/s/.../Teraphyx.dll?dl=1&pv=1

https://mega.nz/temporary/.../DM8kCCzJ

http://download953.mediafire.com/xre032eehv7g/.../PROJECT TERAPHYX V3.dll

Scan exploit.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.