Summary | ZeroBOX

LewdEarth.exe

Generic Malware UPX Malicious Library Malicious Packer PE64 PE File OS Processor Check
Category Machine Started Completed
FILE s1_win7_x6401 July 10, 2023, 7:42 a.m. July 10, 2023, 7:45 a.m.
Size 46.9MB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 0db6389f259acb930d7a6bd811c3ad8d
SHA256 a0af6dc55130bd6ce80bf5f383cd78d3080da1e5f98f7e2266178a064e7af602
CRC32 70679CCC
ssdeep 786432:xtakRWH1pLxgJqrYW1zC8MQdHx6IVswnbOo52FsNW:xQkQPlaMpC8MQGnl1FoW
PDB Path C:\Users\runneradmin\AppData\Local\Temp\pkg.4b617e9855c76174801a6ed1\node\out\Release\node.pdb
Yara
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check
  • IsPE64 - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • Generic_Malware_Zero - Generic Malware

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Users\runneradmin\AppData\Local\Temp\pkg.4b617e9855c76174801a6ed1\node\out\Release\node.pdb
section _RDATA
Symantec ML.Attribute.HighConfidence
Avast Win64:MiscX-gen [PUP]
AVG Win64:MiscX-gen [PUP]