popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

OneDrive.exe

Gen1 Generic Malware Malicious Library UPX Malicious Packer Anti_VM PE64 PE File OS Processor Check ZIP Format DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 July 25, 2024, 8:48 a.m. July 25, 2024, 8:53 a.m.
Size 12.3MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 f468ae483026819d6977e2a5e34ea52a
SHA256 578778fa4d79588a14d0830d4e52dc55aead1ca8bf99c9672cbdaf6c7b58eb5c
CRC32 4511A48A
ssdeep 393216:szuRUAwf7vLF4NkW+eGQR6n/ikWMWfogBIv:szuRIx1W+e5R4qPDXe
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
file C:\Users\test22\AppData\Local\Temp\_MEI25442\libssl-3.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\libcrypto-3.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\python3.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\libffi-8.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\Blsvr.exe
file C:\Users\test22\AppData\Local\Temp\_MEI25442\VCRUNTIME140.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\python311.dll
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Agent.Y!c
Cynet Malicious (score: 99)
Skyhigh BehavesLike.Win64.Agent.rc
ALYac Gen:Variant.Molotov.50
VIPRE Gen:Variant.Molotov.50
Sangfor Trojan.Win32.Save.a
BitDefender Gen:Variant.Molotov.50
Cybereason malicious.830268
Arcabit Trojan.Molotov.50
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of Win64/Kryptik.DZL
APEX Malicious
McAfee Artemis!F468AE483026
Avast Win64:Evo-gen [Trj]
Kaspersky Trojan.Win32.Agent.xawxnn
Alibaba Trojan:Win64/Kryptik.c4284e02
NANO-Antivirus Trojan.Win64.Inject4.kebinl
MicroWorld-eScan Gen:Variant.Molotov.50
Rising Trojan.DisguisedXMRigMiner!8.12EF7 (TFE:5:YhzrPCllRHI)
Emsisoft Gen:Variant.Molotov.50 (B)
F-Secure Trojan.TR/Kryptik.pvjye
DrWeb Trojan.Inject4.60124
Zillya Trojan.Disco.Win32.12039
TrendMicro Trojan.Win64.AMADEY.YXEGXZ
McAfeeD ti!578778FA4D79
FireEye Gen:Variant.Molotov.50
Sophos Mal/Generic-S
Ikarus Trojan.Win64.Krypt
Webroot W32.Trojan.Gen
Google Detected
Avira TR/Kryptik.pvjye
MAX malware (ai score=88)
Kingsoft Win32.Trojan.Agent.xawxnn
Gridinsoft Ransom.Win64.Wacatac.sa
Microsoft Trojan:Win32/Casdet!rfn
ZoneAlarm Trojan.Win32.Agent.xawxnn
GData Win32.Application.Coinminer.6LNG7K
Varist W64/Injector.BMR.gen!Eldorado
AhnLab-V3 Trojan/Win.Generic.R571995
DeepInstinct MALICIOUS
Panda Trj/Chgt.AD
TrendMicro-HouseCall Trojan.Win64.AMADEY.YXEGXZ
Tencent Win32.Trojan.Agent.Xwhl
Fortinet W64/GenKryptik.GIIA!tr
AVG Win64:Evo-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_70% (W)
alibabacloud Trojan:Win/Molotov.Gen