popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

GlitchClipper.exe

Generic Malware Malicious Library UPX PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 12, 2024, 11:27 a.m. Aug. 12, 2024, 11:29 a.m.
Size 547.5KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 8ecad7a38a26ac1fc2c7804afd0599fa
SHA256 83f6f8c068cd5b4448b2525ee799f58aa5ad0ce40f901881eda105f6d6ed4661
CRC32 F733EF3E
ssdeep 12288:RkTOXwOv+O+qw5ZT13sjsaz6ph0lhSMXliRm6oQL0:Rdv+qIZT4Qh0lhSMXlim630
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GetComputerNameW

 computer_name:
0 0

GetComputerNameW

 computer_name: TEST22-PC
1 1 0
section _RDATA
description GlitchClipper.exe tried to sleep 419 seconds, actually delayed analysis time by 113 seconds
Time & API Arguments Status Return Repeated

SetFileAttributesW

 file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath_r: C:\Users\test22\AppData\Roaming\MyHiddenFolder
filepath: C:\Users\test22\AppData\Roaming\MyHiddenFolder
1 1 0

SetFileAttributesW

 file_attributes: 2 (FILE_ATTRIBUTE_HIDDEN)
filepath_r: C:\Users\test22\AppData\Roaming\MyHiddenFolder\GlitchClipper.exe
filepath: C:\Users\test22\AppData\Roaming\MyHiddenFolder\GlitchClipper.exe
1 1 0
reg_key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\My Program reg_value C:\Users\test22\AppData\Roaming\MyHiddenFolder\GlitchClipper.exe
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
CAT-QuickHeal Trojan.Multi
Skyhigh BehavesLike.Win64.Generic.hh
ALYac Gen:Variant.Doina.78499
Cylance Unsafe
VIPRE Gen:Variant.Doina.78499
Sangfor Trojan.Win64.Kryptik.Vvxg
BitDefender Gen:Variant.Doina.78499
Arcabit Trojan.Doina.D132A3
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win64/ClipBanker.FC
APEX Malicious
McAfee Artemis!8ECAD7A38A26
Avast Win64:CrypterX-gen [Trj]
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Trojan:Win64/GenKryptik.8b0b1517
NANO-Antivirus Trojan.Win64.GenKryptik.kqpmez
MicroWorld-eScan Gen:Variant.Doina.78499
Rising Trojan.Kryptik!8.8 (TFE:5:CjRk8ElzHPC)
Emsisoft Gen:Variant.Doina.78499 (B)
F-Secure Trojan.TR/Crypt.Agent.nvpyu
DrWeb Trojan.Siggen29.13278
McAfeeD ti!83F6F8C068CD
FireEye Generic.mg.8ecad7a38a26ac1f
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
Google Detected
Avira TR/Crypt.Agent.nvpyu
MAX malware (ai score=81)
Antiy-AVL Trojan/Win32.Wacatac
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Ransom.Win64.Wacatac.sa
Microsoft Trojan:Win32/Wacatac.B!ml
ZoneAlarm UDS:DangerousObject.Multi.Generic
GData Gen:Variant.Doina.78499
Varist W64/ABTrojan.TLWQ-6807
AhnLab-V3 Trojan/Win.Agent.C5655671
DeepInstinct MALICIOUS
Malwarebytes Neshta.Virus.FileInfector.DDS
Ikarus Trojan.Win64.Krypt
Panda Trj/Chgt.AD
TrendMicro-HouseCall TROJ_GEN.R002H07H324
Tencent Malware.Win32.Gencirc.11c4fad4
MaxSecure Trojan.Malware.1728101.susgen
Fortinet W64/GenKryptik.GZOG!tr
AVG Win64:CrypterX-gen [Trj]
Paloalto generic.ml