popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

ttt01.exe

Generic Malware Malicious Library UPX PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 5, 2024, 11:41 p.m. April 5, 2024, 11:41 p.m.
Size 421.0KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 9185b776b7a981d060b0bb0d7ffed201
SHA256 91a45c416324ed3a8c184e349214e7c82d6df0df4fe6d06f3c7818c0d322373b
CRC32 54F9D732
ssdeep 12288:zZMh/qXO/ljOBYbPUV7TRnP+vacQlokO+bW:Wh/qXIvbPUFxqaQ2W
PDB Path c:\omtnkdoj\bnwv\yogisfk\cqf.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path c:\omtnkdoj\bnwv\yogisfk\cqf.pdb
section {u'size_of_data': u'0x00059400', u'virtual_address': u'0x00013000', u'entropy': 7.935587280185707, u'name': u'.data', u'virtual_size': u'0x0005a3e0'} entropy 7.93558728019 description A section with a high entropy has been found
entropy 0.85 description Overall entropy of this PE file is high
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Pitou.4!c
Cynet Malicious (score: 100)
CAT-QuickHeal Trojan.PitouRI.S28786866
Skyhigh BehavesLike.Win32.Generic.gc
ALYac Gen:Variant.Lazy.214906
Cylance unsafe
VIPRE Gen:Variant.Lazy.214906
Sangfor Trojan.Win32.Pitou.Vf86
BitDefender Gen:Variant.Lazy.214906
Cybereason malicious.6b7a98
Arcabit Trojan.Lazy.D3477A
Symantec ML.Attribute.HighConfidence
Elastic Windows.Generic.Threat
ESET-NOD32 a variant of Win32/Pitou.K
APEX Malicious
McAfee GenericRXHQ-SA!9185B776B7A9
Avast Win32:Pitou-A [Rtk]
Kaspersky UDS:Trojan.Win32.Generic
Alibaba Trojan:Win32/Pitou.5e1df782
NANO-Antivirus Trojan.Win32.Pitou.jpbcqi
SUPERAntiSpyware Trojan.Agent/Gen-Crypt
MicroWorld-eScan Gen:Variant.Lazy.214906
Rising Backdoor.Pitou!1.D9BF (CLASSIC)
Emsisoft Gen:Variant.Lazy.214906 (B)
F-Secure Trojan.TR/Crypt.XPACK.Gen
DrWeb Trojan.Pitou.17
Trapmine malicious.high.ml.score
FireEye Generic.mg.9185b776b7a981d0
Sophos Mal/Generic-S
Ikarus Trojan.Win32.Pitou
Google Detected
Avira TR/Crypt.XPACK.Gen
MAX malware (ai score=80)
Antiy-AVL Trojan/Win32.Pitou
Kingsoft Win32.Trojan.Generic.a
Xcitium TrojWare.Win32.TrojanDownloader.Onkods.Q@52urg7
Microsoft Trojan:Win32/Pitou.AC!MTB
ZoneAlarm UDS:Trojan.Win32.Generic
GData Gen:Variant.Lazy.214906
Varist W32/Pitou.B.gen!Eldorado
AhnLab-V3 Trojan/Win32.Tepfer.R96475
BitDefenderTheta AI:Packer.3352F2C91F
DeepInstinct MALICIOUS
VBA32 Malware-Cryptor.General.3
Malwarebytes Bootkit.Pitou
Panda Trj/Genetic.gen
Tencent Win32.Trojan.Generic.Bkjl
Yandex Trojan.GenAsa!LdWfSJxvz3M
SentinelOne Static AI - Malicious PE