popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

logon.exe

Generic Malware Malicious Library PE32 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 8, 2024, 11:15 a.m. Aug. 8, 2024, 11:19 a.m.
Size 157.1KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 ceccc726e628b9592af475cc27d0a7ae
SHA256 ccb40eb0137e156af89b0e0dbdac4192152dd19540efecdb56eeaa0384e5d55f
CRC32 DBAAA358
ssdeep 3072:WgGMUZwVAMYiEkbIuQSrYfgJ7b7mZdVpvF5QjgJ9r5O:NHt4kc0/Sj1gEi
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

WriteConsoleA

 buffer: logon.exe is heart beat version
console_handle: 0x00000007
1 1 0

WriteConsoleA

 buffer: Please waiting for a moment ...
console_handle: 0x00000007
1 1 0

WriteConsoleA

 buffer: path:C:\Users\test22\AppData\Local\Temp\sinforIP
console_handle: 0x00000007
1 1 0

WriteConsoleA

 buffer: load sinforIP fail
console_handle: 0x00000007
1 1 0

WriteConsoleA

 buffer: GetMatchAcIP fail
console_handle: 0x00000007
1 1 0
Bkav W32.AIDetectMalware
Cylance Unsafe
ESET-NOD32 a variant of Win32/Agent.TXZ
APEX Malicious
McAfee Artemis!CECCC726E628
Avast Win32:Malware-gen
Rising Trojan.Agent!8.B1E (CLOUD)
Zillya Trojan.Agent.Win32.1160276
McAfeeD ti!CCB40EB0137E
FireEye Generic.mg.ceccc726e628b959
Kingsoft Win32.Troj.Undef.a
Microsoft Trojan:Win32/Wacatac.B!ml
BitDefenderTheta AI:Packer.1A5AF0A41F
VBA32 BScope.Trojan.Wacatac
Malwarebytes Malware.Heuristic.2046
Tencent Win32.Trojan.Agent.Lcnw
MaxSecure Trojan.Malware.1728101.susgen
AVG Win32:Malware-gen
CrowdStrike win/malicious_confidence_100% (W)
alibabacloud Trojan:Win/Agent.TDP