Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6403_us | July 26, 2024, 6:43 p.m. | July 26, 2024, 6:45 p.m. |
-
cliente.exe "C:\Users\test22\AppData\Local\Temp\cliente.exe"
2052
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
No hosts contacted. |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
section | .itext |
section | .didata |
section | ."Bx |
section | . f5 |
section | .debug |
section | . "f |
section | .k*4 |
section | .-r} |
section | {u'size_of_data': u'0x01413600', u'virtual_address': u'0x02405000', u'entropy': 7.984383379300942, u'name': u'.-r}', u'virtual_size': u'0x014134d0'} | entropy | 7.9843833793 | description | A section with a high entropy has been found | |||||||||
entropy | 0.996630629757 | description | Overall entropy of this PE file is high |
Bkav | W32.AIDetectMalware |
Elastic | malicious (high confidence) |
Cynet | Malicious (score: 100) |
Cylance | Unsafe |
Symantec | ML.Attribute.HighConfidence |
tehtris | Generic.Malware |
Kaspersky | UDS:Trojan.Win32.Agent.xbrzjr |
McAfeeD | Real Protect-LS!3EF97E69A4C3 |
Trapmine | malicious.high.ml.score |
FireEye | Generic.mg.3ef97e69a4c36ab5 |
Sophos | Generic ML PUA (PUA) |
SentinelOne | Static AI - Malicious PE |
Gridinsoft | Trojan.Heur!.02252021 |
ZoneAlarm | UDS:Trojan.Win32.Agent.xbrzjr |
DeepInstinct | MALICIOUS |
VBA32 | Malware-Cryptor.Inject.gen |
MaxSecure | Trojan.Malware.300983.susgen |
Paloalto | generic.ml |
CrowdStrike | win/malicious_confidence_70% (D) |