popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Updatе.exe

Malicious Library UPX Malicious Packer PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 Nov. 21, 2023, 6:15 p.m. Nov. 21, 2023, 6:18 p.m.
Size 699.5KB
Type PE32 executable (console) Intel 80386, for MS Windows
MD5 3f6d2aa85fcd8e38412f4ab60f8f47f4
SHA256 3eb644492c55f3afab73d0b9842a835d67ccf35c46767d45ae7d2e78fc96d7e5
CRC32 921848C7
ssdeep 12288:R1nGfvqfcZCnVsUonX/hNKo1FdsJt2m2Nl1KsHBMIDG4LcykS/xXn8SUtbR+i:RrcZ0VGnPnveJxwl1uu/9/xXn8b4
Yara
  • Malicious_Library_Zero - Malicious_Library
  • IsPE32 - (no description)
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GetDiskFreeSpaceExW

 total_number_of_free_bytes: 9122611200
free_bytes_available: 9122611200
root_path: C:
total_number_of_bytes: 34252779520
1 1 0
section {u'size_of_data': u'0x00082800', u'virtual_address': u'0x0002c000', u'entropy': 7.997984691079552, u'name': u'.data', u'virtual_size': u'0x00083178'} entropy 7.99798469108 description A section with a high entropy has been found
entropy 0.74731567645 description Overall entropy of this PE file is high
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Stealerc.i!c
FireEye Generic.mg.3f6d2aa85fcd8e38
Skyhigh BehavesLike.Win32.Generic.jc
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_90% (W)
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
APEX Malicious
Kaspersky HEUR:Trojan-PSW.Win32.Stealerc.gen
TrendMicro TrojanSpy.Win32.LUMMASTEALER.YXDKTZ
Trapmine malicious.high.ml.score
Sophos Mal/Generic-S
SentinelOne Static AI - Malicious PE
Webroot W32.Malware.Gen
Varist W32/ABRisk.LIET-6521
Kingsoft Win32.Troj.Unknown.a
Microsoft Trojan:Win32/Leonem
Gridinsoft Trojan.Win32.Gen.sa
ZoneAlarm HEUR:Trojan-PSW.Win32.Stealerc.gen
Google Detected
McAfee Artemis!3F6D2AA85FCD
VBA32 BScope.Backdoor.Wirenet
Cylance unsafe
Panda Trj/Chgt.AD
TrendMicro-HouseCall TrojanSpy.Win32.LUMMASTEALER.YXDKTZ
Rising Trojan.Generic@AI.100 (RDML:MifeMdidFMWS9qAo3Wk8iw)
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/PossibleThreat
BitDefenderTheta Gen:NN.ZexaF.36792.RqW@auLEUL
Cybereason malicious.f96927
DeepInstinct MALICIOUS