popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

xlsrd.cpl

Malicious Library Antivirus UPX DLL OS Processor Check PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Jan. 22, 2023, 1:44 p.m. Jan. 22, 2023, 2:07 p.m.
Size 114.4KB
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 e8bab18bed7a61cadf2f0e0131329897
SHA256 fcfa4888521a3850eae1afd0e336b3d9019b48d8b70bf43a907c3f8c8e0d36a2
CRC32 682A3601
ssdeep 3072:/hjiSq8FncYrxG5G6qk71yFqu58kXJXOgc0F7DdoamzoLuAB:/hfJFcd06R1zu584xTmzoLuk
PDB Path Z:\Rspper\Release\Rspper.pdb
Yara
  • IsPE32 - (no description)
  • OS_Processor_Check_Zero - OS Processor Check
  • IsDLL - (no description)
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
  • Antivirus - Contains references to security software

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
194.5.212.164 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path Z:\Rspper\Release\Rspper.pdb
host 194.5.212.164
Lionic Trojan.Multi.Generic.4!c
MicroWorld-eScan Trojan.GenericKD.64961909
FireEye Trojan.GenericKD.64961909
ALYac Trojan.GenericKD.64961909
Cylance Unsafe
Zillya Exploit.UAC.Win32.678
Sangfor Trojan.Win32.Bypassuac.V2q6
K7AntiVirus Trojan ( 0059d64c1 )
Alibaba Trojan:Win32/BypassUAC.ecfc4718
K7GW Trojan ( 0059d64c1 )
CrowdStrike win/malicious_confidence_100% (W)
Arcabit Trojan.Generic.D3DF3D75
Cyren W32/ABRisk.IYDL-7328
Symantec ML.Attribute.HighConfidence
Elastic malicious (moderate confidence)
ESET-NOD32 Win32/Agent.AFAV
Cynet Malicious (score: 99)
APEX Malicious
Kaspersky Trojan.Win32.BypassUAC.adx
BitDefender Trojan.GenericKD.64961909
Avast Win32:TrojanX-gen [Trj]
Tencent Malware.Win32.Gencirc.10bdc409
Emsisoft Trojan.GenericKD.64961909 (B)
F-Secure Trojan.TR/BypassUAC.jyidx
VIPRE Trojan.GenericKD.64961909
TrendMicro TROJ_GEN.R002C0PA723
McAfee-GW-Edition RDN/Generic.dx
Trapmine malicious.moderate.ml.score
Sophos Mal/Generic-S
Ikarus Trojan.Win32.Agent
Jiangmin Trojan.BypassUAC.ct
Avira TR/BypassUAC.jyidx
Antiy-AVL Trojan/Win32.Agent
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Microsoft Trojan:Win32/Wacatac.B!ml
GData Trojan.GenericKD.64961909
Google Detected
AhnLab-V3 Trojan/Win.Generic.R550611
McAfee Artemis!E8BAB18BED7A
MAX malware (ai score=86)
Malwarebytes Trojan.Agent
TrendMicro-HouseCall TROJ_GEN.R002C0PA723
Rising Trojan.BypassUAC!8.EC23 (TFE:5:nRdGDLjv9nC)
Fortinet W32/PossibleThreat
AVG Win32:TrojanX-gen [Trj]
Panda Trj/Chgt.AA