popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

0beU0RimJUAeIPysjPIQLhgYSowUv3.exe

Gen1
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 22, 2021, 5:13 p.m. April 22, 2021, 5:15 p.m.
Size 557.0KB
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 80a193b93598109aea05d7a9008358bb
SHA256 0941090d3eb785dbf88fbfafffad34c4ab42877b279129616a455347883e5738
CRC32 085D9FF9
ssdeep 12288:/dVY7kNHvbyVfbWWbyHjaSabybbybvkbleb:/k7kNHvbyVfbWWbyHjaSabybbybvkbl2
Yara
  • Win32_Trojan_Gen_2_0904B0_Zero - Win32 Trojan Gen
  • inject_thread - Code injection with CreateRemoteThread in a remote process
  • screenshot - Take screenshot
  • keylogger - Run a keylogger
  • win_mutex - Create or check mutex
  • win_registry - Affect system registries
  • win_token - Affect system token
  • win_private_profile - Affect private profile
  • win_files_operation - Affect private profile
  • PE_Header_Zero - PE File Signature Zero
  • OS_Processor_Check_Zero - OS Processor Check Signature Zero
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • IsWindowsGUI - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section o
section .rdata3
section .rdata2
Bkav W32.AIDetect.malware1
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.Mint.Zamg.O
FireEye Generic.mg.80a193b93598109a
CAT-QuickHeal Trojan.Qshell
McAfee W32/PinkSbot-HJ!80A193B93598
Cylance Unsafe
Zillya Trojan.Qshell.Win32.157
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
Alibaba Trojan:Win32/Qshell.10c01071
K7GW Trojan ( 00577e2d1 )
K7AntiVirus Trojan ( 00577e2d1 )
Cyren W32/Kryptik.CYJ.gen!Eldorado
ESET-NOD32 a variant of Win32/Kryptik.HIUI
APEX Malicious
Paloalto generic.ml
BitDefender Trojan.Mint.Zamg.O
NANO-Antivirus Trojan.Win32.Qshell.ihrzye
AegisLab Hacktool.Win32.Krap.lKMc
Ad-Aware Trojan.Mint.Zamg.O
Emsisoft Trojan.Mint.Zamg.O (B)
Comodo Malware@#2zq7bfdl0l3sh
DrWeb Trojan.Chanitor.59
VIPRE Trojan.Win32.Generic!BT
TrendMicro TROJ_FRS.0NA103AD21
McAfee-GW-Edition BehavesLike.Win32.Dropper.hm
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
GData Trojan.Mint.Zamg.O
Webroot W32.Trojan.Gen
Avira TR/AD.ZDlder.akxqr
Kingsoft Win32.Heur.KVMH008.a.(kcloud)
Gridinsoft Trojan.Heur!.02006020
Arcabit Trojan.Mint.Zamg.O
ViRobot Trojan.Win32.S.Agent.570368.AM
Microsoft Trojan:Win32/Hancitor.ARK!MTB
Cynet Malicious (score: 100)
AhnLab-V3 Malware/Win32.Generic.C4298491
Acronis suspicious
BitDefenderTheta Gen:NN.ZedlaF.34678.IG8@am315Oni
ALYac Trojan.Agent.Hancitor
VBA32 Trojan.Wacatac
Malwarebytes Trojan.Chanitor
TrendMicro-HouseCall TROJ_FRS.0NA103AD21
Tencent Malware.Win32.Gencirc.10ce311d
Yandex Trojan.Qshell!9fP8wkYFOl0
MAX malware (ai score=85)
MaxSecure Trojan.Malware.112112997.susgen
Fortinet W32/GenKryptik.EZVZ!tr