Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6401	July 4, 2024, 10:02 a.m.	July 4, 2024, 10:04 a.m.

Size	4.9MB
Type	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5	`2502f2fb88c1ea569c0b4287ae0613f3`
SHA256	`6c3496832cdffffedde13f9c75138ee62dd968eaa26bc23e1cbc082e638c3513`
CRC32	`17EE2684`
ssdeep	`49152:HwWM2zE1fkrLilu5l55F+QjEcEAGjz5Ep+8YTpuQynVoj28OBpclaYC4Ihign93:QWlzE1fyLi61kE7piK93`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE64 - (no description) DllRegisterServer_Zero - execute regsvr32.exe UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

No Suricata Alerts

No Suricata TLS

Time & API	Arguments	Status	Return	Repeated
__exception__ July 4, 2024, 9:55 a.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 5367320576 registers.r15: 0 registers.rcx: -1 registers.rsi: 3404289 registers.r10: 3221225480 registers.rbx: -10000 registers.rsp: 3404584 registers.r11: 514 registers.r8: 3404624 registers.r9: 350 registers.rdx: 0 registers.r12: 3405144 registers.rbp: 3404640 registers.rdi: 5362462912 registers.rax: 0 registers.r13: 3538608	1	0	0

Bkav	W64.AIDetectMalware
Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
Skyhigh	BehavesLike.Win64.Ransomblackbyte.rh
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005af30d1 )
K7GW	Trojan ( 005af30d1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of WinGo/TrojanDropper.Agent.CS
McAfee	Artemis!2502F2FB88C1
Avast	Win64:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	Trojan.MSIL.Agent.qwitzf
Rising	Trojan.Injector!1.F43F (CLASSIC)
F-Secure	Heuristic.HEUR/AGEN.1372589
TrendMicro	TrojanSpy.Win64.LUMMASTEALER.YXEGCZ
McAfeeD	ti!6C3496832CDF
Sophos	Mal/Generic-S
Ikarus	Trojan.WinGo.Agent
Webroot	W32.Trojan.Agent.Gen
Google	Detected
Avira	HEUR/AGEN.1372589
Kingsoft	MSIL.Trojan.Agent.qwitzf
Gridinsoft	Ransom.Win64.Wacatac.sa
ViRobot	Trojan.Win.Z.Agent.5143040
ZoneAlarm	Trojan.MSIL.Agent.qwitzf
AhnLab-V3	Trojan/Win.Evo-gen.C5558850
DeepInstinct	MALICIOUS
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TrojanSpy.Win64.LUMMASTEALER.YXEGCZ
Fortinet	W32/Agent.CS!tr
AVG	Win64:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_70% (D)
alibabacloud	Trojan[dropper]:Multi/Agent.CB

streamer.exe