popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

tgrewads.exe

OS Processor Check PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 10, 2021, 5:17 p.m. Sept. 10, 2021, 5:19 p.m.
Size 13.0KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 268d55d7e322a47435b83d71d3610f81
SHA256 091c1a3a39bf25321024f33458c5e82b1c10a19eba3d310e3ba4791e9436ab02
CRC32 CE34A4D6
ssdeep 192:hOSLgq6Dxf5TjX0/Rz7Etb/cyWnNQWnKujOD7W8o0LgWl5x7E5hzYEJpfMhF:QSEq6Dk/F7IrTaNMujQ7xoSlf7zCM
Yara
  • PE_Header_Zero - PE File Signature
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE32 - (no description)

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Elastic malicious (high confidence)
FireEye Generic.mg.268d55d7e322a474
Cyren W32/Zusy.HV.gen!Eldorado
Symantec ML.Attribute.HighConfidence
APEX Malicious
Kaspersky UDS:Trojan.Win32.Bingoml.gen
TrendMicro Mal_DLDER
SentinelOne Static AI - Malicious PE
Cynet Malicious (score: 100)
VBA32 BScope.Trojan.NanoBot
TrendMicro-HouseCall Mal_DLDER
Panda Trj/Genetic.gen