popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

YT.exe

Generic Malware Malicious Library UPX Malicious Packer PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Jan. 6, 2024, 10:48 a.m. Jan. 6, 2024, 10:54 a.m.
Size 2.2MB
Type PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5 b1087aa5a1a538d7ee3bd9c3b774bb38
SHA256 c85533dc3627cc14b81a22fb204c42c9e5527e15ad78c832da7a159825de6ec7
CRC32 C2D3C95B
ssdeep 24576:EQ1OwhF5/u7S/OiUVkcOpckjLDSvWrtaG2cskcA8AvuyLdk0JdQGwct28MENdhX2:DMwP5/u79ScOqkjqOrnq29QFxa
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

__exception__

 stacktrace: 

        
      
      
      

    
  
    
      
        exception.symbol:
        
        

      
        exception.exception_code:
        0xc0000005
        

      
        exception.address:
        0x0
        

      
    
  
    
      
        registers.r14:
        5365238304
        

      
        registers.r15:
        0
        

      
        registers.rcx:
        -1
        

      
        registers.rsi:
        3928833
        

      
        registers.r10:
        3221225480
        

      
        registers.rbx:
        -10000
        

      
        registers.rsp:
        3929208
        

      
        registers.r11:
        514
        

      
        registers.r8:
        3929248
        

      
        registers.r9:
        350
        

      
        registers.rdx:
        0
        

      
        registers.r12:
        3929768
        

      
        registers.rbp:
        3929264
        

      
        registers.rdi:
        5363178304
        

      
        registers.rax:
        0
        

      
        registers.r13:
        5373568
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                    


                    

                

            
            
        
            


                

                
                

                    

                    

                        
                        

                            

                                

                                    Bkav
                                    W64.AIDetectMalware
                                    
                                


                            

                        

                            

                                

                                    Lionic
                                    Trojan.Win32.Injuke.16!c
                                    
                                


                            

                        

                            

                                

                                    Elastic
                                    malicious (high confidence)
                                    
                                


                            

                        

                            

                                

                                    MicroWorld-eScan
                                    Trojan.GenericKD.71074136
                                    
                                


                            

                        

                            

                                

                                    Skyhigh
                                    Artemis!Trojan
                                    
                                


                            

                        

                            

                                

                                    McAfee
                                    Artemis!B1087AA5A1A5
                                    
                                


                            

                        

                            

                                

                                    Cylance
                                    unsafe
                                    
                                


                            

                        

                            

                                

                                    Sangfor
                                    Trojan.Win64.Injuke.V2a8
                                    
                                


                            

                        

                            

                                

                                    CrowdStrike
                                    win/malicious_confidence_100% (W)
                                    
                                


                            

                        

                            

                                

                                    K7GW
                                    Trojan ( 005af30d1 )
                                    
                                


                            

                        

                            

                                

                                    K7AntiVirus
                                    Trojan ( 005af30d1 )
                                    
                                


                            

                        

                            

                                

                                    VirIT
                                    Trojan.Win64.Agent.CHIM
                                    
                                


                            

                        

                            

                                

                                    Symantec
                                    ML.Attribute.HighConfidence
                                    
                                


                            

                        

                            

                                

                                    ESET-NOD32
                                    a variant of WinGo/TrojanDropper.Agent.CS
                                    
                                


                            

                        

                            

                                

                                    Kaspersky
                                    Trojan.Win32.Injuke.lanr
                                    
                                


                            

                        

                            

                                

                                    BitDefender
                                    Trojan.GenericKD.71074136
                                    
                                


                            

                        

                            

                                

                                    NANO-Antivirus
                                    Trojan.Win64.Injuke.kgnmre
                                    
                                


                            

                        

                            

                                

                                    Avast
                                    Win64:Evo-gen [Trj]
                                    
                                


                            

                        

                            

                                

                                    Tencent
                                    Win32.Trojan.Injuke.Czlw
                                    
                                


                            

                        

                            

                                

                                    Emsisoft
                                    Trojan.GenericKD.71074136 (B)
                                    
                                


                            

                        

                            

                                

                                    F-Secure
                                    Trojan.TR/Redcap.gbvvj
                                    
                                


                            

                        

                            

                                

                                    VIPRE
                                    Trojan.GenericKD.71074136
                                    
                                


                            

                        

                            

                                

                                    TrendMicro
                                    Trojan.Win64.SMOKELOADER.YXEADZ
                                    
                                


                            

                        

                            

                                

                                    Sophos
                                    Mal/Generic-S
                                    
                                


                            

                        

                            

                                

                                    Ikarus
                                    Trojan.Win64.Agent
                                    
                                


                            

                        

                            

                                

                                    GData
                                    Trojan.GenericKD.71074136
                                    
                                


                            

                        

                            

                                

                                    Webroot
                                    W32.Malware.Gen
                                    
                                


                            

                        

                            

                                

                                    Google
                                    Detected
                                    
                                


                            

                        

                            

                                

                                    Avira
                                    TR/Redcap.gbvvj
                                    
                                


                            

                        

                            

                                

                                    Antiy-AVL
                                    Trojan/Win32.Injuke
                                    
                                


                            

                        

                            

                                

                                    Kingsoft
                                    Win32.Trojan.Injuke.lanr
                                    
                                


                            

                        

                            

                                

                                    Gridinsoft
                                    Trojan.Win64.Agent.sa
                                    
                                


                            

                        

                            

                                

                                    Arcabit
                                    Trojan.Generic.D43C8158
                                    
                                


                            

                        

                            

                                

                                    ZoneAlarm
                                    Trojan.Win32.Injuke.lanr
                                    
                                


                            

                        

                            

                                

                                    Microsoft
                                    Trojan:Win64/Malgent!MSR
                                    
                                


                            

                        

                            

                                

                                    Cynet
                                    Malicious (score: 100)
                                    
                                


                            

                        

                            

                                

                                    AhnLab-V3
                                    Trojan/Win.Evo-gen.C5558850
                                    
                                


                            

                        

                            

                                

                                    MAX
                                    malware (ai score=81)
                                    
                                


                            

                        

                            

                                

                                    Malwarebytes
                                    Generic.Malware.AI.DDS
                                    
                                


                            

                        

                            

                                

                                    Panda
                                    Trj/Chgt.AD
                                    
                                


                            

                        

                            

                                

                                    TrendMicro-HouseCall
                                    Trojan.Win64.SMOKELOADER.YXEADZ
                                    
                                


                            

                        

                            

                                

                                    Yandex
                                    Trojan.Injuke!epxlhZHl3Jw
                                    
                                


                            

                        

                            

                                

                                    Fortinet
                                    W32/Agent.CS!tr
                                    
                                


                            

                        

                            

                                

                                    AVG
                                    Win64:Evo-gen [Trj]
                                    
                                


                            

                        

                            

                                

                                    DeepInstinct
                                    MALICIOUS