popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

SetupPowerGREPDemo.exe

Generic Malware Malicious Library UPX Malicious Packer PE64 PE File dll OS Processor Check wget DllRegisterServer
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Jan. 20, 2024, 6 p.m. Jan. 20, 2024, 6:07 p.m.
Size 13.0MB
Type PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5 a29a203a471bcfaf00f00386bc60aee6
SHA256 a5f1498dc8e50a7e9963ed8b55e575100cb69c88c55da2d5e7db97df8c4aa948
CRC32 4933E6EF
ssdeep 98304:t1WMEE+OPwN9l2fRgddw304vSyEh5B+3ZQRVYF:PlEEOj2fRdPvSfZs
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Malicious_Packer_Zero - Malicious Packer
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • wget_command - wget command
  • Generic_Malware_Zero - Generic Malware
  • DllRegisterServer_Zero - execute regsvr32.exe
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

__exception__

 stacktrace: 

        
      
      
      

    
  
    
      
        exception.symbol:
        
        

      
        exception.exception_code:
        0xc0000005
        

      
        exception.address:
        0x0
        

      
    
  
    
      
        registers.r14:
        5370800896
        

      
        registers.r15:
        0
        

      
        registers.rcx:
        -1
        

      
        registers.rsi:
        2554113
        

      
        registers.r10:
        3221225480
        

      
        registers.rbx:
        -10000
        

      
        registers.rsp:
        2554248
        

      
        registers.r11:
        514
        

      
        registers.r8:
        2554288
        

      
        registers.r9:
        350
        

      
        registers.rdx:
        0
        

      
        registers.r12:
        2554816
        

      
        registers.rbp:
        2554312
        

      
        registers.rdi:
        5357642208
        

      
        registers.rax:
        0
        

      
        registers.r13:
        4587264
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                    


                    

                

            
            
        
            


                

                
                

                    

                    

                        
                        

                            

                                

                                    
                                        
                                    
                                        
                                            section
                                            {u'size_of_data': u'0x00014800', u'virtual_address': u'0x00d33000', u'entropy': 7.155976823689238, u'name': u'.rsrc', u'virtual_size': u'0x0001473a'}
                                        
                                    
                                        
                                            entropy
                                            7.15597682369
                                        
                                    
                                        
                                            description
                                            A section with a high entropy has been found
                                        
                                    
                                


                            

                        

                    


                    

                

            
            
        
            


                

                
                

                    

                    

                        
                        

                            

                                

                                    Bkav
                                    W64.AIDetectMalware
                                    
                                


                            

                        

                            

                                

                                    Skyhigh
                                    Artemis!Trojan
                                    
                                


                            

                        

                            

                                

                                    Cylance
                                    unsafe
                                    
                                


                            

                        

                            

                                

                                    Sangfor
                                    Trojan.Win32.Agent.Vjmb
                                    
                                


                            

                        

                            

                                

                                    Symantec
                                    ML.Attribute.HighConfidence
                                    
                                


                            

                        

                            

                                

                                    ESET-NOD32
                                    a variant of Generik.NWVIAQV
                                    
                                


                            

                        

                            

                                

                                    McAfee
                                    Artemis!A29A203A471B
                                    
                                


                            

                        

                            

                                

                                    Sophos
                                    Mal/Generic-S
                                    
                                


                            

                        

                            

                                

                                    Ikarus
                                    Win32.Outbreak
                                    
                                


                            

                        

                            

                                

                                    Google
                                    Detected
                                    
                                


                            

                        

                            

                                

                                    Antiy-AVL
                                    Trojan/Win32.Sabsik
                                    
                                


                            

                        

                            

                                

                                    Kingsoft
                                    Win32.Troj.Unknown.a
                                    
                                


                            

                        

                            

                                

                                    Microsoft
                                    Trojan:Win32/Znyonm
                                    
                                


                            

                        

                            

                                

                                    AhnLab-V3
                                    Trojan/Win.Generic.C5572820
                                    
                                


                            

                        

                            

                                

                                    DeepInstinct
                                    MALICIOUS
                                    
                                


                            

                        

                            

                                

                                    Malwarebytes
                                    Generic.Malware/Suspicious
                                    
                                


                            

                        

                            

                                

                                    Fortinet
                                    W32/PossibleThreat