arpwriteIni.exe| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6403_us | June 21, 2024, 3:47 p.m. | June 21, 2024, 3:55 p.m. |
-
-
-
ipconfig.exe ipconfig
2112
-
-
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| cmdline | C:\Windows\system32\cmd.exe /c ipconfig |
| section | {u'size_of_data': u'0x0005ca00', u'virtual_address': u'0x0009a000', u'entropy': 7.937082394866587, u'name': u'UPX1', u'virtual_size': u'0x0005d000'} | entropy | 7.93708239487 | description | A section with a high entropy has been found | |||||||||
| section | {u'size_of_data': u'0x00011800', u'virtual_address': u'0x000f7000', u'entropy': 7.263556107382141, u'name': u'.rsrc', u'virtual_size': u'0x00012000'} | entropy | 7.26355610738 | description | A section with a high entropy has been found | |||||||||
| entropy | 1.0 | description | Overall entropy of this PE file is high | |||||||||||
| process | cmd.exe |
| section | UPX0 | description | Section name indicates UPX | ||||||
| section | UPX1 | description | Section name indicates UPX | ||||||
| cmdline | ipconfig |
| cmdline | C:\Windows\system32\cmd.exe /c ipconfig |
| Bkav | W32.AIDetectMalware |
| Lionic | Trojan.Win32.Generic.4!c |
| Elastic | malicious (moderate confidence) |
| Cynet | Malicious (score: 100) |
| Skyhigh | BehavesLike.Win32.TrojanAitInject.gc |
| Cylance | Unsafe |
| Sangfor | Trojan.Win32.Save.a |
| tehtris | Generic.Malware |
| APEX | Malicious |
| McAfee | RDN/Generic.dx |
| Avast | Win32:Malware-gen |
| Alibaba | Trojan:Win32/Injector.12e2760b |
| McAfeeD | ti!21DB0FDA1ECA |
| Trapmine | malicious.high.ml.score |
| FireEye | Generic.mg.8ffe154b25091cb5 |
| Sophos | Generic ML PUA (PUA) |
| Ikarus | Trojan.Win32.Obfuscated |
| Jiangmin | Trojan.Agent.epis |
| Detected | |
| Antiy-AVL | Trojan/Win32.SGeneric |
| Varist | W32/AutoIt.XQ.gen!Eldorado |
| BitDefenderTheta | Gen:NN.ZexaF.36806.BmGfaqZVyEmi |
| DeepInstinct | MALICIOUS |
| Malwarebytes | Malware.AI.4249198465 |
| TrendMicro-HouseCall | TROJ_GEN.R002H06ET24 |
| MaxSecure | Trojan.Malware.300983.susgen |
| Fortinet | PossibleThreat.PALLAS.H |
| AVG | Win32:Malware-gen |
| Paloalto | generic.ml |
| CrowdStrike | win/malicious_confidence_70% (W) |