home

filezilla_3.exe

The executable filezilla_3.exe has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from cdn.dashsoftwarethread.com and multiple other hosts.
MD5:
dbeba26641f5466d64f93f3f5c10812f

SHA-1:
3c6f298916b45218738f8c6a0a247876ac7ee56e

SHA-256:
072e47d82d44c253181211789cb26073fbd2d717d45c2f09d3e477980a59e649

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/25/2024 4:53:23 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.23.15

File size:
940 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\filezilla_3.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
24:kg0MDEsZLzfgVJPoJ8s/JHWSiMzHTV2Sldy:d0M710VJPgb/ktwVy

Entry point:
3C, 68, 74, 6D, 6C, 3E, 3C, 68, 65, 61, 64, 3E, 3C, 4D, 45, 54, 41, 20, 48, 54, 54, 50, 2D, 45, 51, 55, 49, 56, 3D, 22, 45, 78, 70, 69, 72, 65, 73, 22, 20, 43, 4F, 4E, 54, 45, 4E, 54, 3D, 22, 2D, 31, 22, 3E, 3C, 4D, 45, 54, 41, 20, 48, 54, 54, 50, 2D, 45, 51, 55, 49, 56, 3D, 22, 50, 72, 61, 67, 6D, 61, 22, 20, 43, 4F, 4E, 54, 45, 4E, 54, 3D, 22, 6E, 6F, 2D, 63, 61, 63, 68, 65, 22, 3E, 3C, 4D, 45, 54, 41, 20, 48, 54, 54, 50, 2D, 45, 51, 55, 49, 56, 3D, 22, 43, 61, 63, 68, 65, 2D, 43, 6F, 6E, 74, 72, 6F, 6C...
 
[+]

Entropy:
5.3448

The file filezilla_3.exe has been seen being distributed by the following 3 URLs.

http://cdn.dashsoftwarethread.com/c?x=t0wO//nqDj48cjPN4 xq1APhqo/APB60NsN6TOmYQP8=&c=Onhp0zFWLVGBsc/.../M67Nwe7CTdivyevPjXqz2sK7kDJdb4Pxaq3 ZOzNeUl1UjTBjMXv3EMaJWOT6ry0k8bNbqLFebUhbR68u LkIaNejN8oHYCKSSi84SZLCv3FfOX0GLqOGoOL028w==

http://www.grabrepositorycapital.com/c?x=dJsIHcMM/NKWFcsjf3tvIAbKVQGKsnNYh4mt0ovGPQU=&c=lLnk9bQA9Kk63T1j8yXkWB7ocxbCi8eE1CLI11VkV5ytizU5HbEF0ibRvopBIAWvENJpujWPFcj8ygobhrnzkIc4kKtdppMq88gO4iRmfj37q8KXjiDZQOcYdQYl/z8Be6L7p1qMPB0//dTrbKPjmk5pry8bd9LiGdCIvWQVNyk=

http://cdn.softsumagrabclear.com/c?x=bNjNc6Ew9/B0iqoKv356vgcIODJGcjfJrEFxVe T/HY=&c=TEiIeYo3HJxYgxRRlD9FIqAnvZK37k8gcMCNLcHJjSOd1/yWo SeVoh17ZJapP/g7IAoI/.../4YZvD1iLQQdPWYsg==&downloadAs=Chrome_Setup.exe

Remove filezilla_3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.