popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

inte.exe

Generic Malware UPX Malicious Library PE File OS Processor Check PE32
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us July 6, 2024, 6:19 p.m. July 6, 2024, 6:21 p.m.
Size 176.0KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 0da0d1efee859f1fe9cbd3bf5b428af6
SHA256 21382b6a3f31731282f1c2801626f85ac4eb2c9f9b2c02921ccb4f7ec2fef295
CRC32 20406F82
ssdeep 3072:rN7iMf3nwVQywGvFt3II7A1lJJyjGbhCI6kiNqzuY+8OqtOAg0Fuj0prQKZaD:rN7iMfXwVQibIa6bTCIbiNnpAOhKZaD
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
185.172.128.90 Active Moloch

Suricata Alerts

Flow SID Signature Category
TCP 185.172.128.90:80 -> 192.168.56.103:49161 2400032 ET DROP Spamhaus DROP Listed Traffic Inbound group 33 Misc Attack

Suricata TLS

No Suricata TLS

suspicious_features Connection to IP address suspicious_request GET http://185.172.128.90/cpa/ping.php?substr=one&s=two
request GET http://185.172.128.90/cpa/ping.php?substr=one&s=two
host 185.172.128.90
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Tepfer.i!c
Elastic Windows.Generic.Threat
MicroWorld-eScan Gen:Variant.Zusy.534250
Skyhigh BehavesLike.Win32.Generic.ch
ALYac Gen:Variant.Zusy.534250
Cylance Unsafe
VIPRE Gen:Variant.Zusy.534250
Sangfor Downloader.Win32.Tepfer.V8j0
K7AntiVirus Trojan-Downloader ( 005480a41 )
BitDefender Gen:Variant.Zusy.534250
K7GW Trojan-Downloader ( 005480a41 )
Cybereason malicious.fee859
VirIT Trojan.Win32.Tepfer.AG
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/TrojanDownloader.Agent.ELB
APEX Malicious
McAfee Artemis!0DA0D1EFEE85
Avast Win32:DropperX-gen [Drp]
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-PSW.Win32.Tepfer.gen
Alibaba TrojanPSW:Win32/Tepfer.d7cb1220
NANO-Antivirus Trojan.Win32.JP.knyang
Rising Downloader.Agent!1.F3FA (CLASSIC)
Emsisoft Gen:Variant.Zusy.534250 (B)
F-Secure Trojan.TR/Dldr.Agent.udues
DrWeb Trojan.DownLoader46.65201
Zillya Downloader.Agent.Win32.565789
McAfeeD Real Protect-LS!0DA0D1EFEE85
Trapmine suspicious.low.ml.score
Sophos Mal/Generic-S
Ikarus Win32.Outbreak
Jiangmin Trojan.PSW.Tepfer.nlt
Webroot W32.Trojan.Tepfer
Google Detected
Avira TR/Dldr.Agent.udues
Antiy-AVL Trojan/Win32.Tepfer
Kingsoft Win32.Trojan-PSW.Tepfer.gen
Gridinsoft Malware.Win32.Gen.tr
Arcabit Trojan.Zusy.D826EA
ViRobot Trojan.Win.Z.Tepfer.180224.X
ZoneAlarm HEUR:Trojan-PSW.Win32.Tepfer.gen
Varist W32/Agent.EPA.gen!Eldorado
AhnLab-V3 Trojan/Win.Generic.C5574203
BitDefenderTheta AI:Packer.DCCAC5221F
TACHYON Trojan-PWS/W32.Tepfer.180224.W
DeepInstinct MALICIOUS
VBA32 BScope.TrojanPSW.Tepfer
Malwarebytes Trojan.Downloader
Panda Trj/GdSda.A