popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

ujxckjczud.exe

AsyncRAT Generic Malware PWS PE File OS Processor Check PE32 .NET EXE
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 June 24, 2021, 7:29 p.m. June 24, 2021, 7:35 p.m.
Size 209.5KB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 e4f78978c762392406197670a9bf4695
SHA256 97fad55cde834908174ecd2bf38afdbce652c32613ea476d74c94c0d0ad855b1
CRC32 A64C425D
ssdeep 6144:ArMKFRytbs2icyCNYeQpnbFKRnbe8OhFh52UAOyT1M1mHmvHGJCEg:ArBFYbs2bxIJKRnbe8OhFh52UAOyT1MJ
Yara
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
  • PE_Header_Zero - PE File Signature
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • Is_DotNET_EXE - (no description)
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section g\x082o\x14^\x1b)
section
section {u'size_of_data': u'0x00012a00', u'virtual_address': u'0x00002000', u'entropy': 7.997601578196376, u'name': u'g\\x082o\\x14^\\x1b)', u'virtual_size': u'0x00012940'} entropy 7.9976015782 description A section with a high entropy has been found
entropy 0.357314148681 description Overall entropy of this PE file is high
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Ransom.Jigsaw.10
FireEye Generic.mg.e4f78978c7623924
ALYac Gen:Variant.Ransom.Jigsaw.10
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
K7AntiVirus Trojan ( 005797941 )
Alibaba Backdoor:MSIL/Crysan.60a46ae8
K7GW Trojan ( 005797941 )
Cybereason malicious.8c7623
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Agent.DHI
APEX Malicious
Avast Win32:Trojan-gen
Kaspersky HEUR:Backdoor.MSIL.Crysan.gen
BitDefender Gen:Variant.Ransom.Jigsaw.10
Paloalto generic.ml
Tencent Win32.Trojan.Ransom.Amlz
Ad-Aware Gen:Variant.Ransom.Jigsaw.10
Emsisoft Gen:Variant.Ransom.Jigsaw.10 (B)
TrendMicro TROJ_GEN.R06CC0DFK21
McAfee-GW-Edition BehavesLike.Win32.Generic.dh
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
Webroot W32.Trojan.Gen
Avira HEUR/AGEN.1121272
eGambit Unsafe.AI_Score_99%
Kingsoft Win32.Heur.KVMH008.a.(kcloud)
Gridinsoft Trojan.Heur!.03013281
Microsoft Trojan:MSIL/Ursu.KP
AegisLab Trojan.MSIL.Crysan.m!c
ZoneAlarm HEUR:Backdoor.MSIL.Crysan.gen
GData Gen:Variant.Ransom.Jigsaw.10
Cynet Malicious (score: 100)
McAfee RDN/Generic BackDoor
MAX malware (ai score=85)
VBA32 CIL.HeapOverride.Heur
Malwarebytes Trojan.Crypt.MSIL
TrendMicro-HouseCall TROJ_GEN.R06CC0DFK21
Ikarus Trojan.MSIL.Agent
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/Crysan.DHI!tr.bdr
BitDefenderTheta Gen:NN.ZemsilF.34758.nu0@aeND!Up
AVG Win32:Trojan-gen
Panda Trj/GdSda.A
CrowdStrike win/malicious_confidence_100% (W)