popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

cjuorszkjg.exe

AsyncRAT Generic Malware PWS PE File OS Processor Check PE32 .NET EXE
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 June 24, 2021, 10:57 p.m. June 24, 2021, 11:09 p.m.
Size 210.0KB
Type PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
MD5 f4b8b0e43e3d5437668a54f1a395a8b4
SHA256 3881f8c9810bda2e98d998d9aecbe51182b36cfb25c9d13abc878ed1198f8b02
CRC32 4F034E7D
ssdeep 6144:IggJd84b870I+O5BWmEq4NxPbYMQNA2eOrUgiP+JJu9LcCEJeIuE:IFJinIkMQNA2eOrUgiP+JJu9LcCEJeI3
Yara
  • Win_Backdoor_AsyncRAT_Zero - Win Backdoor AsyncRAT
  • PE_Header_Zero - PE File Signature
  • Win32_Trojan_PWS_Net_1_Zero - Win32 Trojan PWS .NET Azorult
  • Is_DotNET_EXE - (no description)
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section _in<|&x\x11
section
section {u'size_of_data': u'0x00012a00', u'virtual_address': u'0x00002000', u'entropy': 7.997601045274195, u'name': u'_in<|&x\\x11', u'virtual_size': u'0x000129e8'} entropy 7.99760104527 description A section with a high entropy has been found
entropy 0.356459330144 description Overall entropy of this PE file is high
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Ransom.Jigsaw.10
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
Cybereason malicious.43e3d5
BitDefenderTheta Gen:NN.ZemsilF.34758.nu0@aWUf8Hp
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of MSIL/Agent.DHI
APEX Malicious
Avast Win32:Malware-gen
Kaspersky HEUR:Backdoor.MSIL.Crysan.gen
BitDefender Gen:Variant.Ransom.Jigsaw.10
Tencent Win32.Trojan.Ransom.Edxg
Ad-Aware Gen:Variant.Ransom.Jigsaw.10
Emsisoft Gen:Variant.Ransom.Jigsaw.10 (B)
TrendMicro TROJ_GEN.R06CC0DFK21
FireEye Generic.mg.f4b8b0e43e3d5437
Sophos Generic ML PUA (PUA)
Ikarus Trojan.MSIL.Agent
GData Gen:Variant.Ransom.Jigsaw.10
eGambit Unsafe.AI_Score_99%
Avira HEUR/AGEN.1121272
Gridinsoft Trojan.Heur!.03013281
Arcabit Trojan.Ransom.Jigsaw.10
ZoneAlarm HEUR:Backdoor.MSIL.Crysan.gen
Microsoft Trojan:MSIL/Ursu.KP
Cynet Malicious (score: 100)
VBA32 CIL.HeapOverride.Heur
ALYac Gen:Variant.Ransom.Jigsaw.10
MAX malware (ai score=86)
Malwarebytes Trojan.Crypt.MSIL
TrendMicro-HouseCall TROJ_GEN.R06CC0DFK21
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
AVG Win32:Malware-gen
CrowdStrike win/malicious_confidence_100% (D)