3IR10ztB.php| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6401 | June 3, 2021, 11:10 a.m. | June 3, 2021, 11:10 a.m. |
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| section | .crt |
| section | {u'size_of_data': u'0x0001ec00', u'virtual_address': u'0x00007000', u'entropy': 7.7502362670695035, u'name': u'.rdata', u'virtual_size': u'0x0001ea54'} | entropy | 7.75023626707 | description | A section with a high entropy has been found | |||||||||
| section | {u'size_of_data': u'0x00006200', u'virtual_address': u'0x00026000', u'entropy': 6.8713159708761316, u'name': u'.crt', u'virtual_size': u'0x00007d08'} | entropy | 6.87131597088 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.855072463768 | description | Overall entropy of this PE file is high | |||||||||||
| Elastic | malicious (high confidence) |
| FireEye | Generic.mg.a9a3fd9fd53605ef |
| Cylance | Unsafe |
| CrowdStrike | win/malicious_confidence_90% (D) |
| BitDefenderTheta | Gen:NN.ZedlaF.34722.ku8@a4SuFZli |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of Win32/Kryptik.HLEA |
| APEX | Malicious |
| Avast | Win32:TrojanX-gen [Trj] |
| Kaspersky | VHO:Trojan.Win32.Sdum.gen |
| NANO-Antivirus | Virus.Win32.Gen.ccmw |
| Sophos | ML/PE-A |
| Ikarus | Trojan-Banker.Dridex |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Cynet | Malicious (score: 100) |
| McAfee | GenericRXOS-YC!A9A3FD9FD536 |
| Rising | Trojan.Generic@ML.95 (RDML:CyXGXt7N6W7SYpzVdZ8V6A) |
| SentinelOne | Static AI - Suspicious PE |
| AVG | Win32:TrojanX-gen [Trj] |