popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

random.exe

Malicious Library UPX Malicious Packer PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Oct. 12, 2023, 7:42 a.m. Oct. 12, 2023, 7:47 a.m.
Size 4.3MB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 c47b267a11aaf34abcf7ceec04e629c1
SHA256 cdd242949c27e36165097665a7c381247579401853b06e88d2e430b55e115105
CRC32 7B3948DE
ssdeep 49152:rxjExlHWRF3fK9D+dXbk9BDkIG3uhgFt6kppmmSkHpf:rwloVT3zmil
Yara
  • Malicious_Library_Zero - Malicious_Library
  • UPX_Zero - UPX packed file
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .managed
section _RDATA
Bkav W64.AIDetectMalware
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Lazy.408893
Arcabit Trojan.Lazy.D63D3D
ESET-NOD32 a variant of Win64/Kryptik.EAV
BitDefender Gen:Variant.Lazy.408893
Avast Win64:MalwareX-gen [Trj]
Emsisoft Gen:Variant.Lazy.408893 (B)
FireEye Gen:Variant.Lazy.408893
MAX malware (ai score=86)
Antiy-AVL Trojan/Win32.Wacatac
Microsoft Trojan:Win32/Sabsik.RD.A!ml
GData Gen:Variant.Lazy.408893
Malwarebytes Trojan.MalPack.Generic
Fortinet W64/GenKryptik.GMLB!tr
AVG Win64:MalwareX-gen [Trj]