popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

66afa0d3934d8_ultfix.exe

Generic Malware Malicious Library UPX Malicious Packer PE64 PE File dll OS Processor Check DllRegisterServer
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Aug. 11, 2024, 2:24 p.m. Aug. 11, 2024, 3:49 p.m.
Size 16.3MB
Type PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5 0da8d6933fc99a15fc4ed8b20145f7b5
SHA256 a0906077d04dbccf4fdcaa15f49f5d214bfdb2baf845126d44ff638f620681bf
CRC32 7AD0FF2A
ssdeep 98304:Hy3ex5+JHQDw3/2xXz5pDUcg+b+EmCu8scTiPc8HLaAK4i:aHLuxXz5eWb7mCl/TifKr
Yara
  • DllRegisterServer_Zero - execute regsvr32.exe
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

__exception__

 stacktrace: 

        
      
      
      

    
  
    
      
        exception.symbol:
        
        

      
        exception.exception_code:
        0xc0000005
        

      
        exception.address:
        0x0
        

      
    
  
    
      
        registers.r14:
        5380887488
        

      
        registers.r15:
        0
        

      
        registers.rcx:
        -1
        

      
        registers.rsi:
        3339777
        

      
        registers.r10:
        3221225480
        

      
        registers.rbx:
        -10000
        

      
        registers.rsp:
        3340088
        

      
        registers.r11:
        514
        

      
        registers.r8:
        3340128
        

      
        registers.r9:
        350
        

      
        registers.rdx:
        0
        

      
        registers.r12:
        3340656
        

      
        registers.rbp:
        3340152
        

      
        registers.rdi:
        5364250816
        

      
        registers.rax:
        0
        

      
        registers.r13:
        4871600
        

      
    
  


    
        1
    

0

    
        0
    


                                


                            

                        

                    


                    

                

            
            
        
            


                

                
                

                    

                    

                        
                        

                            

                                

                                    Bkav
                                    W64.AIDetectMalware
                                    
                                


                            

                        

                            

                                

                                    Elastic
                                    malicious (high confidence)
                                    
                                


                            

                        

                            

                                

                                    Cynet
                                    Malicious (score: 99)
                                    
                                


                            

                        

                            

                                

                                    Skyhigh
                                    Artemis
                                    
                                


                            

                        

                            

                                

                                    K7AntiVirus
                                    Trojan ( 005af5bf1 )
                                    
                                


                            

                        

                            

                                

                                    K7GW
                                    Trojan ( 005af5bf1 )
                                    
                                


                            

                        

                            

                                

                                    Symantec
                                    ML.Attribute.HighConfidence
                                    
                                


                            

                        

                            

                                

                                    ESET-NOD32
                                    a variant of WinGo/TrojanDropper.Agent.CW
                                    
                                


                            

                        

                            

                                

                                    McAfee
                                    Artemis!0DA8D6933FC9
                                    
                                


                            

                        

                            

                                

                                    Avast
                                    Win64:Malware-gen
                                    
                                


                            

                        

                            

                                

                                    Kaspersky
                                    Trojan.MSIL.Agent.qwiuss
                                    
                                


                            

                        

                            

                                

                                    Alibaba
                                    TrojanDropper:MSIL/Genric.42eb02bf
                                    
                                


                            

                        

                            

                                

                                    Rising
                                    Trojan.Injector!1.F43F (CLASSIC)
                                    
                                


                            

                        

                            

                                

                                    F-Secure
                                    Heuristic.HEUR/AGEN.1372589
                                    
                                


                            

                        

                            

                                

                                    McAfeeD
                                    ti!A0906077D04D
                                    
                                


                            

                        

                            

                                

                                    SentinelOne
                                    Static AI - Suspicious PE
                                    
                                


                            

                        

                            

                                

                                    Webroot
                                    W32.Trojan.Gen
                                    
                                


                            

                        

                            

                                

                                    Google
                                    Detected
                                    
                                


                            

                        

                            

                                

                                    Avira
                                    HEUR/AGEN.1372589
                                    
                                


                            

                        

                            

                                

                                    Microsoft
                                    Trojan:Win32/Wacatac.B!ml
                                    
                                


                            

                        

                            

                                

                                    ZoneAlarm
                                    Trojan.MSIL.Agent.qwiuss
                                    
                                


                            

                        

                            

                                

                                    GData
                                    Win32.Trojan-Stealer.Cordimik.YLTV1B
                                    
                                


                            

                        

                            

                                

                                    AhnLab-V3
                                    Trojan/Win.Evo-gen.C5558850
                                    
                                


                            

                        

                            

                                

                                    DeepInstinct
                                    MALICIOUS
                                    
                                


                            

                        

                            

                                

                                    Ikarus
                                    Trojan-Dropper.WinGo.Agent
                                    
                                


                            

                        

                            

                                

                                    Tencent
                                    Malware.Win32.Gencirc.1415207d
                                    
                                


                            

                        

                            

                                

                                    huorong
                                    HEUR:Trojan/Injector.av
                                    
                                


                            

                        

                            

                                

                                    Fortinet
                                    W32/Agent.CW!tr
                                    
                                


                            

                        

                            

                                

                                    AVG
                                    Win64:Malware-gen
                                    
                                


                            

                        

                            

                                

                                    Paloalto
                                    generic.ml
                                    
                                


                            

                        

                            

                                

                                    alibabacloud
                                    Trojan[dropper]:Multi/Agent.CI