Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6401 | Sept. 16, 2023, 2:03 p.m. | Sept. 16, 2023, 2:10 p.m. |
-
ss29.exe "C:\Users\test22\AppData\Local\Temp\ss29.exe"
2556
Name | Response | Post-Analysis Lookup |
---|---|---|
z.nnnaajjjgc.com | 156.236.72.121 |
Suricata Alerts
Suricata TLS
No Suricata TLS
pdb_path | msinfo32.pdb |
resource name | MUI |
section | {u'size_of_data': u'0x00024600', u'virtual_address': u'0x0003e000', u'entropy': 7.259470949935542, u'name': u'.rsrc', u'virtual_size': u'0x00025000'} | entropy | 7.25947094994 | description | A section with a high entropy has been found | |||||||||
entropy | 0.395918367347 | description | Overall entropy of this PE file is high |
Bkav | W32.AIDetectMalware.64 |
McAfee | GenericRXAA-FA!46F9E2ACBE65 |
Cylance | unsafe |
Sangfor | Trojan.Win32.Agent.V02v |
VirIT | Trojan.Win64.Agent.BCD |
Symantec | ML.Attribute.HighConfidence |
Elastic | malicious (high confidence) |
ESET-NOD32 | a variant of Win64/GenKryptik.GMIU |
APEX | Malicious |
Kaspersky | UDS:Trojan.Win32.Fabookie.bvh |
Avast | Win64:Evo-gen [Trj] |
McAfee-GW-Edition | BehavesLike.Win64.Dropper.fh |
Sophos | Mal/Generic-S |
Gridinsoft | Trojan.Win64.Gen.bot |
Microsoft | Trojan:Win32/Sabsik.FL.B!ml |
ZoneAlarm | UDS:Trojan.Win32.Fabookie.bvh |
Detected | |
AhnLab-V3 | Malware/Win.Generic.C5462723 |
Malwarebytes | Generic.Malware/Suspicious |
Rising | Downloader.Agent!8.B23 (TFE:2:EmnL0dJ0FNC) |
Ikarus | Trojan.SuspectCRC |
AVG | Win64:Evo-gen [Trj] |
DeepInstinct | MALICIOUS |