Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6401 | July 20, 2021, 8:02 a.m. | July 20, 2021, 8:10 a.m. |
-
vbc.exe "C:\Users\test22\AppData\Local\Temp\vbc.exe"
2212
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
164.124.101.2 | Active | Moloch |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
pdb_path | C:\vakozosut\fuc\sipu.pdb |
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_ICON | language | LANG_SERBIAN | filetype | GLS_BINARY_LSB_FIRST | sublanguage | SUBLANG_DEFAULT | offset | 0x005aead0 | size | 0x00000468 | ||||||||||||||||||
name | RT_STRING | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005b1060 | size | 0x0000024a | ||||||||||||||||||
name | RT_STRING | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005b1060 | size | 0x0000024a | ||||||||||||||||||
name | RT_STRING | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005b1060 | size | 0x0000024a | ||||||||||||||||||
name | RT_STRING | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005b1060 | size | 0x0000024a | ||||||||||||||||||
name | RT_STRING | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005b1060 | size | 0x0000024a | ||||||||||||||||||
name | RT_STRING | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005b1060 | size | 0x0000024a | ||||||||||||||||||
name | RT_STRING | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005b1060 | size | 0x0000024a | ||||||||||||||||||
name | RT_ACCELERATOR | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005aefd0 | size | 0x00000010 | ||||||||||||||||||
name | RT_ACCELERATOR | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005aefd0 | size | 0x00000010 | ||||||||||||||||||
name | RT_GROUP_ICON | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005a5758 | size | 0x00000068 | ||||||||||||||||||
name | RT_GROUP_ICON | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005a5758 | size | 0x00000068 | ||||||||||||||||||
name | RT_GROUP_ICON | language | LANG_SERBIAN | filetype | data | sublanguage | SUBLANG_DEFAULT | offset | 0x005a5758 | size | 0x00000068 |
section | {u'size_of_data': u'0x0001f800', u'virtual_address': u'0x00001000', u'entropy': 7.538123906496485, u'name': u'.text', u'virtual_size': u'0x0001f666'} | entropy | 7.5381239065 | description | A section with a high entropy has been found | |||||||||
entropy | 0.576659038902 | description | Overall entropy of this PE file is high |
Bkav | W32.AIDetect.malware2 |
Lionic | Trojan.Win32.Androm.m!c |
Elastic | malicious (high confidence) |
MicroWorld-eScan | Trojan.GenericKD.46635268 |
ALYac | Trojan.GenericKD.46635268 |
Cylance | Unsafe |
Sangfor | Trojan.Win32.Save.a |
K7AntiVirus | Trojan ( 0057f8071 ) |
Alibaba | Backdoor:Win32/Azorult.3f56fddc |
K7GW | Trojan ( 0057f8071 ) |
CrowdStrike | win/malicious_confidence_100% (W) |
Arcabit | Trojan.Generic.D2C79904 |
Cyren | W32/Kryptik.EQG.gen!Eldorado |
Symantec | ML.Attribute.HighConfidence |
ESET-NOD32 | a variant of Win32/Kryptik.HLSW |
APEX | Malicious |
Paloalto | generic.ml |
ClamAV | Win.Malware.Generic-9879218-0 |
Kaspersky | HEUR:Backdoor.Win32.Androm.gen |
BitDefender | Trojan.GenericKD.46635268 |
Avast | Win32:CrypterX-gen [Trj] |
Ad-Aware | Trojan.GenericKD.46635268 |
Emsisoft | Trojan.Crypt (A) |
DrWeb | Trojan.DownLoader10.59199 |
TrendMicro | TROJ_GEN.R002C0DGI21 |
McAfee-GW-Edition | BehavesLike.Win32.Generic.dh |
FireEye | Generic.mg.8cf5cb10708d0fea |
Sophos | Mal/Generic-S |
Ikarus | Virus.Win32.Cryptor |
Kingsoft | Win32.Hack.Undef.(kcloud) |
Gridinsoft | Ransom.Win32.STOP.ko!se63798 |
Microsoft | Ransom:Win32/StopCrypt.MYK!MTB |
ZoneAlarm | HEUR:Backdoor.Win32.Androm.gen |
GData | Win32.Trojan.BSE.B7OUEX |
Cynet | Malicious (score: 100) |
AhnLab-V3 | Infostealer/Win.SmokeLoader.R431958 |
Acronis | suspicious |
McAfee | Packed-GDT!8CF5CB10708D |
MAX | malware (ai score=81) |
VBA32 | Backdoor.Agent |
Malwarebytes | Trojan.MalPack.GS |
TrendMicro-HouseCall | TROJ_GEN.R002C0DGI21 |
Rising | Malware.Obscure!1.A3BB (CLASSIC) |
SentinelOne | Static AI - Malicious PE |
eGambit | Unsafe.AI_Score_94% |
Fortinet | W32/GenKryptik.ERHN!tr |
MaxSecure | Trojan.Malware.300983.susgen |
AVG | Win32:CrypterX-gen [Trj] |
Panda | Trj/RnkBend.A |
Qihoo-360 | Win32/Backdoor.Androm.HwoCq3cA |