Summary | ZeroBOX

AdobeUpdate.exe

Generic Malware Malicious Library UPX PE64 PE File OS Processor Check
Category Machine Started Completed
FILE s1_win7_x6403_us Jan. 17, 2022, 1:32 p.m. Jan. 17, 2022, 1:34 p.m.
Size 2.4MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 aee35c2dc70abe1732fc4fc593aa6e37
SHA256 5847c9caee588bf5b3c9c710cd8f12aabed088becea48b79637c73732948feac
CRC32 64C9C312
ssdeep 24576:HYng7x1WeZkcJ5os5hej4Rlk4rwla/b9kD5sOz/fl8drNy:HYgtEDiCswPla6mhy
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • Win32_Trojan_Gen_2_0904B0_Zero - Win32 Trojan Gen
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section _RDATA
resource name None
file C:\Users\test22\AppData\Local\Temp\11\Adobe-Update.exe
McAfee Artemis!AEE35C2DC70A
Cylance Unsafe
ESET-NOD32 a variant of Win64/Agent.NE
Paloalto generic.ml
Cynet Malicious (score: 100)
McAfee-GW-Edition Artemis!Trojan
Gridinsoft SUSP.Double_Encoded.bot!yf
Microsoft Trojan:Script/Wacatac.B!ml
Rising Trojan.Agent!8.B1E (CLOUD)
file C:\Users\test22\AppData\Local\Temp\11\Adobe-Update.exe