Summary | ZeroBOX

cryppp.exe

Generic Malware Malicious Library UPX Malicious Packer PE64 PE File OS Processor Check
Category Machine Started Completed
FILE s1_win7_x6401 Jan. 18, 2024, 7:53 a.m. Jan. 18, 2024, 7:57 a.m.
Size 2.8MB
Type PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5 a95b7d1ef3c4f8932fa97c287dd54c70
SHA256 a91ab913b292db7d5791d76bcf96303ce16bddcf84e631ba109a0f0c2eb9563b
CRC32 8756BCB4
ssdeep 24576:4oT0RJ0DfNYx0UqU6OOPSxjQmTOcSc9rvjlaWDXvoZWiUI6bp8psQ0wct/VWv2yP:4f/0hYjqUGPcQOOcvjQWDoZ/p6afZux
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 5366619456
registers.r15: 0
registers.rcx: -1
registers.rsi: 3995649
registers.r10: 3221225480
registers.rbx: -10000
registers.rsp: 3995848
registers.r11: 514
registers.r8: 3995888
registers.r9: 350
registers.rdx: 0
registers.r12: 3996408
registers.rbp: 3995904
registers.rdi: 5363968992
registers.rax: 0
registers.r13: 5570208
1 0 0
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
Skyhigh BehavesLike.Win64.Trojan.vh
ALYac Trojan.GenericKDZ.104934
Cylance unsafe
VIPRE Trojan.GenericKDZ.104934
Sangfor Dropper.Win32.Agent.Va10
BitDefender Trojan.GenericKDZ.104934
Arcabit Trojan.Generic.D199E6
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of WinGo/TrojanDropper.Agent.CW
McAfee Artemis!A95B7D1EF3C4
Avast FileRepMalware [Pws]
Kaspersky UDS:Trojan-Spy.Win32.Stealer
MicroWorld-eScan Trojan.GenericKDZ.104934
Rising Dropper.Agent!1.F3A7 (CLASSIC)
Emsisoft Trojan.GenericKDZ.104934 (B)
Sophos Mal/Generic-S
Ikarus Trojan.Win64.Agent
Webroot W32.Malware.Gen
Kingsoft Win32.Troj.Unknown.a
Microsoft Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm UDS:Trojan-Spy.Win32.Stealer
GData Trojan.GenericKDZ.104934
AhnLab-V3 Trojan/Win.Evo-gen.C5558850
DeepInstinct MALICIOUS
Malwarebytes Generic.Malware.AI.DDS
Fortinet W64/GoAgent.CW!tr
AVG FileRepMalware [Pws]