home

assleech.dll

The library assleech.dll has been detected as malware by 19 anti-virus scanners. The file has been seen being downloaded from ln.syncusercontent.com.
MD5:
8c23905680ad9d5c21f8610f95d71699

SHA-1:
9b435d326a216c71c4a0dad7acd151b8d2676a1d

SHA-256:
6d9e14920a61ccbe7583839e435fec0810bef2fd516c7e4c3282033487f5f1b3

Scanner detections:
19 / 68

Status:
Malware

Analysis date:
5/22/2024 6:50:27 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.16370952
277

Arcabit
Trojan.Generic.DF9CD08
1.0.0.672

avast!
Win32:Malware-gen
2014.9-160503

AVG
Win32/Blacked
2017.0.2755

Bitdefender
Trojan.Generic.16370952
1.0.20.620

Bkav FE
HW32.Packed
1.3.0.7744

Emsisoft Anti-Malware
Trojan.Generic.16370952
8.16.05.03.09

ESET NOD32
Win32/Packed.VMProtect.ABO (variant)
10.13385

Fortinet FortiGate
W32/VMProtBad.A!tr
5/3/2016

F-Secure
Trojan.Generic.16370952
11.2016-03-05_3

G Data
Trojan.Generic.16370952
16.5.25

IKARUS anti.virus
Trojan.Win32.VMProtect
t3scan.2.0.9.0

McAfee
Artemis!8C23905680AD
5600.6411

MicroWorld eScan
Trojan.Generic.16370952
17.0.0.372

nProtect
Trojan.Generic.16370952
16.04.22.01

Qihoo 360 Security
HEUR/QVM36.0.Malware.Gen
1.0.0.1120

Sophos
Mal/VMProtBad-A
4.98

Trend Micro
TROJ_GEN.R047C0EDN16
10.465.03

VIPRE Antivirus
Trojan.Win32.Generic
48892

File size:
151.5 KB (155,136 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\downloads\assleech.dll

File PE Metadata
Compilation timestamp:
4/17/2016 2:19:58 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
3072:iHtja91Sc6j/YaLe1pGEznqb4DcOuKEd/N9HORhFtakPL:qtW9Qcw/YacpG0qbYcO6ZgrPL

Entry address:
0x10E093

Entry point:
E9, 33, F5, FF, FF, D8, E2, 1B, FF, 19, C2, 4D, 8A, FB, 45, 8A, 94, 8F, 4A, D2, 4A, D3, 0F, 56, CA, 47, 7F, 02, 98, 73, 6A, 7E, C0, 0F, 90, 46, DD, 7F, C4, 78, FA, DA, CB, E2, 60, 8D, 23, 62, C7, 8B, 32, CA, 03, 29, F4, 5C, 94, 30, 55, 4E, 38, A3, C7, 89, 10, 13, 12, 9D, D7, 97, B6, A9, 06, 4C, 4B, 86, 02, C7, C2, E3, 6A, 2E, 20, D7, 06, 91, D5, 9F, C0, 08, C9, AD, F4, 67, 5A, D7, 3F, 4F, E1, 2F, A1, A9, 3B, B7, D3, B1, 59, 3F, 22, 60, 0C, CF, C0, 2B, AC, A7, 9E, 21, 60, C5, 24, 36, 8F, 27, EC, F8, 09, 36...
 
[+]

Entropy:
7.4932

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
22 KB (22,528 bytes)

The file assleech.dll has been seen being distributed by the following URL.

https://ln.syncusercontent.com/mfs-97579db612f415624e9e269e4a0011edc5c1bd36b808173eafee13dc00ffaf9a1/p/Assleech.dll?sharelink_id=160392870008&linkoid=8000008&linkcachekey=20f951d30&datakey=DstHKm4CcdhqoTKrrt0jUZBYMUNDjj4bxSmN/1Nj6qiCsZdUxeatKMDaiPq9vEnJXY9W/GO2KQPMZx52OBefVUPMMrErXI9yPjtsjp7gbsaKTjl0zIes3jBEWhZJ XoKOmm/WfpC W/uVwA6rqXuc/9LvOg7dNji4gqA4plL jG6IwF8O0tLTcBpOHvvyhmZNqXZ5dPTXZDKErg05NiNoMj94CnUP rGgAh2tvNWeI5yy/.../b5e53VfCf5vnaxYni5EJebf0WUwerUcKndwgbkjOAY0zqw&mode=100&header1=Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9vY3RldC1zdHJlYW0&header2=Q29udGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9IkFzc2xlZWNoLmRsbCI

Remove assleech.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.