popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

enbvcsisokec.exe

AsyncRAT Generic Malware PWS PE File OS Processor Check PE32 .NET EXE
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 June 24, 2021, 10:56 p.m. June 24, 2021, 11:06 p.m.
Size 210.5KB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 0e49ad93c3db682db359b39256dda4bb
SHA256 2f77dfbf0a9d341bef558c259b6f0be98a78c0fc21f59a1a6ce16f1529b5f950
CRC32 1B7F248B
ssdeep 6144:oOBL5Ko9/dbgkjdwofXvPBV8bG2TT0ihb227ByMUCMyap:PV8ohlZjyOnfl2TT0ihb227ByMUCMyap
Yara
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
  • PE_Header_Zero - PE File Signature
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • Is_DotNET_EXE - (no description)
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section \x0f\x02.\x04o/mF
section
section {u'size_of_data': u'0x00012c00', u'virtual_address': u'0x00002000', u'entropy': 7.997762251784188, u'name': u'\\x0f\\x02.\\x04o/mF', u'virtual_size': u'0x00012adc'} entropy 7.99776225178 description A section with a high entropy has been found
entropy 0.35799522673 description Overall entropy of this PE file is high
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Ransom.Jigsaw.10
FireEye Generic.mg.0e49ad93c3db682d
ALYac Gen:Variant.Ransom.Jigsaw.10
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
Cybereason malicious.3c3db6
Arcabit Trojan.Ransom.Jigsaw.10
BitDefenderTheta Gen:NN.ZemsilF.34758.nu0@a4IpNzn
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Agent.DHI
TrendMicro-HouseCall TROJ_GEN.R06CC0DFJ21
Avast Win32:Trojan-gen
Kaspersky HEUR:Backdoor.MSIL.Crysan.gen
BitDefender Gen:Variant.Ransom.Jigsaw.10
Ad-Aware Gen:Variant.Ransom.Jigsaw.10
Emsisoft Gen:Variant.Ransom.Jigsaw.10 (B)
F-Secure Heuristic.HEUR/AGEN.1121272
TrendMicro TROJ_GEN.R06CC0DFJ21
SentinelOne Static AI - Malicious PE
APEX Malicious
eGambit Unsafe.AI_Score_99%
Avira HEUR/AGEN.1121272
Gridinsoft Trojan.Heur!.03013281
Microsoft Trojan:MSIL/Ursu.KP
GData Gen:Variant.Ransom.Jigsaw.10
Cynet Malicious (score: 100)
MAX malware (ai score=85)
VBA32 CIL.HeapOverride.Heur
Malwarebytes Trojan.Crypt.MSIL
Ikarus Trojan.MSIL.Agent
MaxSecure Trojan.Malware.300983.susgen
AVG Win32:Trojan-gen
CrowdStrike win/malicious_confidence_100% (D)