popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

autoupdate.exe

CoinMiner Antivirus UPX Malicious Library OS Processor Check PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 6, 2024, 9:13 a.m. Aug. 6, 2024, 9:16 a.m.
Size 130.0KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 0c6e9d70bef24a7bfacfb744e4cd3368
SHA256 453e3c1266d62585c853ab63291b365ccdd3c8bb1eed0008e94b58decf6978fd
CRC32 A786ED34
ssdeep 3072:fxIOnaZVEoAh54W91l8nWOMFcCmejUaaacoreXAeDHk+:OOnaZMhF96ujaWreXASHr
PDB Path D:\projects\autoupdate\Release\autoupdate.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • CoinMiner_IN - CoinMiner
  • Antivirus - Contains references to security software
  • IsPE32 - (no description)
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path D:\projects\autoupdate\Release\autoupdate.pdb
Bkav W32.AIDetectMalware
Elastic malicious (moderate confidence)
APEX Malicious
Kaspersky UDS:DangerousObject.Multi.Generic
McAfeeD ti!453E3C1266D6
Kingsoft Win32.Troj.Unknown.a
Microsoft Trojan:Win32/Sonbokli.A!cl
ZoneAlarm UDS:DangerousObject.Multi.Generic
CrowdStrike win/malicious_confidence_60% (W)