Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6403_us	June 14, 2024, 10:13 a.m.	June 14, 2024, 10:15 a.m.

Size	10.3MB
Type	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5	`97b47da3b16adb27c0ad00f1d5f7e112`
SHA256	`8c6384d028d05c46050dbc8c30fc7d5987c6be9545f9d688eab6baed96970fa5`
CRC32	`CB5B8814`
ssdeep	`98304:jEnPZfEoGSw7crw7x9j0PuDCXtfE4BK/epa2BJLl:2KoGorw7SuDCX24zJL`
Yara	IsPE64 - (no description) Malicious_Library_Zero - Malicious_Library Malicious_Packer_Zero - Malicious Packer DllRegisterServer_Zero - execute regsvr32.exe Microsoft_Office_File_Zero - Microsoft Office File UPX_Zero - UPX packed file PE_Header_Zero - PE File Signature Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

No Suricata Alerts

No Suricata TLS

Time & API	Arguments	Status	Return	Repeated
__exception__ June 14, 2024, 10:13 a.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 5376299744 registers.r15: 0 registers.rcx: -1 registers.rsi: 3798017 registers.r10: 3221225480 registers.rbx: -10000 registers.rsp: 3798392 registers.r11: 514 registers.r8: 3798432 registers.r9: 350 registers.rdx: 0 registers.r12: 3798960 registers.rbp: 3798456 registers.rdi: 5365955200 registers.rax: 0 registers.r13: 5636000	1	0	0

Bkav	W64.AIDetectMalware
Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
Skyhigh	BehavesLike.Win64.Trojan.vh
ALYac	Trojan.GenericKD.73102760
Cylance	Unsafe
VIPRE	Trojan.GenericKD.73102760
Sangfor	Dropper.Win32.Agent.Vny3
K7AntiVirus	Trojan ( 005af5bf1 )
Alibaba	TrojanDropper:MSIL/Genric.8cb27e81
K7GW	Trojan ( 005af5bf1 )
VirIT	Trojan.Win64.Genus.GVJ
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of WinGo/TrojanDropper.Agent.CW
McAfee	Artemis!97B47DA3B16A
Paloalto	generic.ml
Kaspersky	Trojan.MSIL.Agent.qwitqt
BitDefender	Trojan.GenericKD.73102760
MicroWorld-eScan	Trojan.GenericKD.73102760
Rising	Trojan.Injector!1.F43F (CLASSIC)
Emsisoft	Trojan.GenericKD.73102760 (B)
F-Secure	Heuristic.HEUR/AGEN.1372589
DrWeb	Trojan.Packed2.46947
McAfeeD	ti!8C6384D028D0
FireEye	Trojan.GenericKD.73102760
Sophos	Mal/Generic-S
Ikarus	Trojan.WinGo.Agent
Avira	HEUR/AGEN.1372589
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Win32.Phonzy
Kingsoft	MSIL.Trojan.Agent.qwitqt
Gridinsoft	Trojan.Win64.Agent.cl
Xcitium	Malware@#3nehm6oa64x5m
Arcabit	Trojan.Generic.D45B75A8
ZoneAlarm	Trojan.MSIL.Agent.qwitqt
GData	Trojan.GenericKD.73102760
AhnLab-V3	Trojan/Win.Evo-gen.C5558850
DeepInstinct	MALICIOUS
VBA32	TrojanPSW.Lumma
Malwarebytes	Trojan.Loader
TrendMicro-HouseCall	Trojan.Win64.PRIVATELOADER.YXEFKZ
Tencent	Msil.Trojan.Agent.Vdkl
Fortinet	W32/Agent.CW!tr
Panda	Trj/Chgt.AD
CrowdStrike	win/malicious_confidence_100% (W)
alibabacloud	Trojan[dropper]:Multi/Agent.CI

theporndude.exe