popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

KoverV2_launch.exe

Gen1 Malicious Library UPX Anti_VM PE64 PE File OS Processor Check DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Jan. 22, 2023, 3:43 p.m. Jan. 22, 2023, 4:04 p.m.
Size 6.4MB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 c536233b2a3d1b3684234d7a06e3c13b
SHA256 53baaf9bd0f49630860bb54752927876799f069250fba2856e76042353996013
CRC32 A770652B
ssdeep 196608:z8DGXkFICteErowCzlxZV3Gu5D4S26cBCS3dR4Gc1d:ABInEro/14S2HBwGcz
Yara
  • OS_Processor_Check_Zero - OS Processor Check
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
section _RDATA
file C:\Users\test22\AppData\Local\Temp\_MEI25562\pywin32_system32\pywintypes310.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25562\VCRUNTIME140.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25562\libcrypto-1_1.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25562\libssl-1_1.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25562\python310.dll
APEX Malicious
Cynet Malicious (score: 100)
FireEye Generic.mg.c536233b2a3d1b36
Gridinsoft Ransom.Win64.Wacatac.oa!s1
Acronis suspicious