popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

bin.dll

UPX Malicious Packer PE64 PE File DLL OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us May 11, 2024, 7:30 p.m. May 11, 2024, 7:49 p.m.
Size 14.0KB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 ab3fff8fb136f2cbd1a5c150c57cf297
SHA256 516cd00b81fafacc964ed755a4e53ad7bb2ca39a3b72c8248b59bb7d336496ec
CRC32 AE9BD97C
ssdeep 192:Y+nFXDJdiMHounU1UgfMhTPpaa9DsnD2wxVpGVfcRyVlNG:xntLimFnUdM/B9D6DnxVp1yVl
PDB Path D:\Package\IDEA\Code\VS_C++\DLL_inject\DLL_inject3\DLL6\x64\Release\AES_IPV6_DLL_Loder3.pdb
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • IsDLL - (no description)
  • Malicious_Packer_Zero - Malicious Packer
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path D:\Package\IDEA\Code\VS_C++\DLL_inject\DLL_inject3\DLL6\x64\Release\AES_IPV6_DLL_Loder3.pdb
Bkav W32.Common.1CB7F580
Lionic Trojan.Win32.Rozena.4!c
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
Skyhigh RDN/Generic.dx
ALYac Gen:Variant.Tedy.545148
Cylance unsafe
VIPRE Gen:Variant.Tedy.545148
K7AntiVirus Trojan ( 00595c181 )
BitDefender Gen:Variant.Tedy.545148
K7GW Trojan ( 00595c181 )
Arcabit Trojan.Tedy.D8517C
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of Win64/Rozena.OT
McAfee RDN/Generic.dx
Avast Win64:TrojanX-gen [Trj]
Kaspersky UDS:Trojan.Win32.Generic
Alibaba Trojan:Win64/Rozena.cb8caad3
MicroWorld-eScan Gen:Variant.Tedy.545148
Rising Backdoor.CobaltStrike/x64!1.E713 (CLASSIC)
Emsisoft Gen:Variant.Tedy.545148 (B)
F-Secure Trojan.TR/Rozena.qbvcc
Zillya Trojan.Rozena.Win64.38140
TrendMicro Backdoor.Win64.COBEACON.YXECEZ
FireEye Gen:Variant.Tedy.545148
Sophos Mal/Generic-S
Ikarus Trojan.Win64.Rozena
Webroot W32.Malware.Gen
Google Detected
Avira TR/Rozena.qbvcc
MAX malware (ai score=85)
Antiy-AVL Trojan/Win64.Rozena
Kingsoft Win32.Trojan.Generic.a
Gridinsoft Trojan.Win64.CobaltStrike.tr
Microsoft Trojan:Win32/Wacatac.B!ml
ZoneAlarm UDS:Trojan.Win32.Generic
GData Gen:Variant.Tedy.545148
DeepInstinct MALICIOUS
Malwarebytes Trojan.ShellCode
Panda Trj/Chgt.AD
TrendMicro-HouseCall Backdoor.Win64.COBEACON.YXECEZ
Tencent Malware.Win32.Gencirc.13f9c28b
MaxSecure Trojan.Malware.7164915.susgen
Fortinet W64/Rozena.OT!tr
AVG Win64:TrojanX-gen [Trj]
Paloalto generic.ml
alibabacloud Trojan:Win/Rozena.OT