Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6401	Aug. 8, 2024, 2:35 p.m.	Aug. 8, 2024, 2:42 p.m.

Size	14.7MB
Type	PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5	`a80b3beac20e2a5d805c51c36ba14a53`
SHA256	`fc678f0540da23c49928f774b88856d297ae5732f48e154279a78da2ff4af566`
CRC32	`3239823D`
ssdeep	`98304:JZa9tkJCVhrpvIVymuxZtNUbh/oEBc/pWltsqF:7a7DvIVy9tGblBBbF`
Yara	DllRegisterServer_Zero - execute regsvr32.exe Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature Malicious_Packer_Zero - Malicious Packer IsPE64 - (no description) UPX_Zero - UPX packed file Generic_Malware_Zero - Generic Malware OS_Processor_Check_Zero - OS Processor Check

66b274e0e1b95_shapr3D.exe "C:\Users\test22\AppData\Local\Temp\66b274e0e1b95_shapr3D.exe"
2584

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

No Suricata Alerts

No Suricata TLS

Time & API	Arguments	Status	Return	Repeated
__exception__ Aug. 8, 2024, 2:28 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 5383064736 registers.r15: 0 registers.rcx: -1 registers.rsi: 2880513 registers.r10: 3221225480 registers.rbx: -10000 registers.rsp: 2880648 registers.r11: 514 registers.r8: 2880688 registers.r9: 350 registers.rdx: 0 registers.r12: 2881216 registers.rbp: 2880712 registers.rdi: 5368052032 registers.rax: 0 registers.r13: 5504800	1	0	0

Bkav	W64.AIDetectMalware
Lionic	Trojan.Win32.Injuke.16!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
Sangfor	Dropper.Win32.Injuke.V22i
K7AntiVirus	Trojan ( 005af5bf1 )
BitDefender	Trojan.Generic.36686380
K7GW	Trojan ( 005af5bf1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of WinGo/TrojanDropper.Agent.CW
McAfee	Artemis!A80B3BEAC20E
Avast	Win64:Malware-gen
Kaspersky	Trojan.Win32.Injuke.oezw
Alibaba	TrojanDropper:Win32/Injuke.51a738e0
MicroWorld-eScan	Trojan.Generic.36686380
Emsisoft	Trojan.Generic.36686380 (B)
F-Secure	Heuristic.HEUR/AGEN.1372589
TrendMicro	Trojan.Win64.PRIVATELOADER.YXEHFZ
McAfeeD	ti!FC678F0540DA
FireEye	Trojan.Generic.36686380
Sophos	Mal/Generic-S
Ikarus	Trojan-Dropper.WinGo.Agent
Webroot	W32.Injuke.oezw
Google	Detected
Avira	HEUR/AGEN.1372589
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Win32.Injuke
Kingsoft	Win32.Trojan.Injuke.oezw
Gridinsoft	Spy.Win64.Gen.tr
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ZoneAlarm	Trojan.Win32.Injuke.oezw
GData	Win64.Trojan.Agent.OMQHIY
Varist	W64/ABTrojan.YCJP-0127
AhnLab-V3	Trojan/Win.Evo-gen.C5558850
DeepInstinct	MALICIOUS
Malwarebytes	PUP.Optional.SmartDriverUpdater
TrendMicro-HouseCall	Trojan.Win64.PRIVATELOADER.YXEHFZ
Tencent	Malware.Win32.Gencirc.14153f73
Fortinet	W32/Agent.CW!tr
AVG	Win64:Malware-gen
Paloalto	generic.ml
alibabacloud	Trojan[dropper]:Multi/Agent.CI

66b274e0e1b95_shapr3D.exe