popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

FSB.exe

Generic Malware Malicious Library Downloader UPX PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Aug. 19, 2024, 1:59 p.m. Aug. 19, 2024, 3:13 p.m.
Size 608.5KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 04c2bd9282a55152d9e640b0780b8a69
SHA256 ef4e84bbd548bd86564af86b7154025a2e28d5f2e650464af56fed719140753a
CRC32 FD75DB2D
ssdeep 12288:rj7s+bMz7vDMuLP70gMRK/mG7X3nCkokBIoSq:jthyQKeIXlokBIu
PDB Path D:\ProjectStub\ConsoleApplication6\x64\Release\ConsoleApplication6.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Network_Downloader - File Downloader
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
pdb_path D:\ProjectStub\ConsoleApplication6\x64\Release\ConsoleApplication6.pdb
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
section _RDATA
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

 process_identifier: 2564
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x000000007304c000
process_handle: 0xffffffffffffffff
1 0 0
Bkav W64.AIDetectMalware
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
ALYac Gen:Variant.Mikey.168729
Cylance Unsafe
VIPRE Gen:Variant.Mikey.168729
BitDefender Gen:Variant.Mikey.168729
Symantec ML.Attribute.HighConfidence
APEX Malicious
Avast Win64:DropperX-gen [Drp]
Kaspersky VHO:Trojan-Downloader.Win32.Convagent.gen
MicroWorld-eScan Gen:Variant.Mikey.168729
Emsisoft Gen:Variant.Mikey.168729 (B)
McAfeeD ti!EF4E84BBD548
Trapmine suspicious.low.ml.score
FireEye Generic.mg.04c2bd9282a55152
Google Detected
MAX malware (ai score=83)
ZoneAlarm VHO:Trojan-Downloader.Win32.Convagent.gen
GData Gen:Variant.Mikey.168729
AhnLab-V3 Trojan/Win.Generic.C5651463
DeepInstinct MALICIOUS
Malwarebytes Malware.AI.1316914979
Ikarus Trojan.Win64.Agent
AVG Win64:DropperX-gen [Drp]
CrowdStrike win/malicious_confidence_90% (D)