a.exe| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6401 | Aug. 25, 2023, 9:33 a.m. | Aug. 25, 2023, 9:36 a.m. |
-
a.exe "C:\Users\test22\AppData\Local\Temp\a.exe"
2560
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| section | {u'size_of_data': u'0x00570e00', u'virtual_address': u'0x00006000', u'entropy': 7.6664440514456755, u'name': u'.data', u'virtual_size': u'0x00570d40'} | entropy | 7.66644405145 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.994733083378 | description | Overall entropy of this PE file is high | |||||||||||
| Bkav | W32.AIDetectMalware.64 |
| Cybereason | malicious.2da798 |
| Symantec | ML.Attribute.HighConfidence |
| Elastic | malicious (high confidence) |
| Cynet | Malicious (score: 100) |
| F-Secure | Trojan.TR/Crypt.EPACK.Gen2 |
| McAfee-GW-Edition | BehavesLike.Win64.BlackLotus.tc |
| Ikarus | Trojan.Win64.Krypt |
| Avira | TR/Crypt.EPACK.Gen2 |
| Acronis | suspicious |
| SentinelOne | Static AI - Suspicious PE |
| MaxSecure | Trojan.Malware.300983.susgen |
| CrowdStrike | win/malicious_confidence_100% (D) |