zzzz1.exe| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6401 | Aug. 17, 2024, 10:09 p.m. | Aug. 17, 2024, 10:11 p.m. |
-
zzzz1.exe "C:\Users\test22\AppData\Local\Temp\zzzz1.exe"
2548 -
explorer.exe C:\Windows\Explorer.EXE
1452
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| file | C:\Users\test22\AppData\Local\Temp\onefile_2548_133683845677812500\python310.dll |
| file | C:\Users\test22\AppData\Local\Temp\onefile_2548_133683845677812500\stub.exe |
| file | C:\Users\test22\AppData\Local\Temp\onefile_2548_133683845677812500\libcrypto-1_1.dll |
| file | C:\Users\test22\AppData\Local\Temp\onefile_2548_133683845677812500\sqlite3.dll |
| file | C:\Users\test22\AppData\Local\Temp\onefile_2548_133683845677812500\libffi-7.dll |
| file | C:\Users\test22\AppData\Local\Temp\onefile_2548_133683845677812500\python3.dll |
| file | C:\Users\test22\AppData\Local\Temp\onefile_2548_133683845677812500\vcruntime140.dll |
| file | C:\Users\test22\AppData\Local\Temp\onefile_2548_133683845677812500\libssl-1_1.dll |
| section | {u'size_of_data': u'0x00a5aa00', u'virtual_address': u'0x0004b000', u'entropy': 7.99916541625135, u'name': u'.rsrc', u'virtual_size': u'0x00a5a828'} | entropy | 7.99916541625 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.987795220571 | description | Overall entropy of this PE file is high | |||||||||||
| file | C:\Users\test22\AppData\Local\Temp\onefile_2548_133683845677812500\stub.exe |
| Bkav | W64.AIDetectMalware |
| Lionic | Trojan.Win32.Agent.Y!c |
| Cynet | Malicious (score: 100) |
| ALYac | Gen:Variant.Tedy.623914 |
| Sangfor | Trojan.Win32.Save.a |
| K7AntiVirus | Trojan ( 005b86c21 ) |
| K7GW | Trojan ( 005b86c21 ) |
| Symantec | ML.Attribute.HighConfidence |
| Elastic | malicious (high confidence) |
| ESET-NOD32 | a variant of Win64/Packed.Agent_AGen.D suspicious |
| APEX | Malicious |
| Avast | Win64:MalwareX-gen [Trj] |
| Kaspersky | UDS:DangerousObject.Multi.Generic |
| Alibaba | Packed:Win64/Agent_AGen.56a9b622 |
| MicroWorld-eScan | Gen:Variant.Tedy.623914 |
| Emsisoft | Gen:Variant.Tedy.623914 (B) |
| F-Secure | Trojan.TR/Agent.tvakw |
| Zillya | Trojan.Stealer.Win32.175953 |
| TrendMicro | Trojan.Win64.AMADEY.YXEHLZ |
| McAfeeD | ti!93429472073D |
| Sophos | Mal/Generic-S |
| SentinelOne | Static AI - Malicious PE |
| Avira | TR/Agent.tvakw |
| MAX | malware (ai score=87) |
| Antiy-AVL | Trojan[Packed]/Python.Nuitka |
| Gridinsoft | Malware.Win64.Gen.tr |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| ZoneAlarm | HEUR:Trojan.Win64.Agent.gen |
| AhnLab-V3 | Malware/Win.Generic.R660067 |
| McAfee | Artemis!A5C740EB48FA |
| DeepInstinct | MALICIOUS |
| Malwarebytes | Malware.AI.2287101548 |
| Panda | Trj/Chgt.AD |
| TrendMicro-HouseCall | Trojan.Win64.AMADEY.YXEHLZ |
| Tencent | Win64.Trojan.Agent.Dkjl |
| Yandex | Trojan.Agent!KCtEEMJh1xI |
| Fortinet | Riskware/Application |
| AVG | Win64:MalwareX-gen [Trj] |
| Paloalto | generic.ml |
| CrowdStrike | win/malicious_confidence_100% (D) |
| alibabacloud | Trojan:Win/Packed.Agent_AGen.D |