popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

cvef.exe

Generic Malware Malicious Library Downloader UPX PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Aug. 19, 2024, 2:02 p.m. Aug. 19, 2024, 2:25 p.m.
Size 238.5KB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 5b24b568922198941e4bd8f8c7ac35c8
SHA256 492e4abc2f6b4082f4b68fa44ee624765a4c37e06f4322987e0a4c5e18122ccd
CRC32 58BCDC43
ssdeep 3072:3jt1xQ4yHDe4Nr8alivPgk3M0dQYJzcT9IjkY3lT1QYFUsC93:ztt4Nr8alivPgWM0dQF9IjkY8rs
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Network_Downloader - File Downloader
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
bitbucket.org
A 104.192.140.24
A 104.192.140.25
A 104.192.140.26
104.192.140.26
IP Address Status Action
104.192.140.25 Active Moloch
164.124.101.2 Active Moloch

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
section _RDATA
file C:\Users\test22\AppData\Local\file1.exe
Bkav W64.AIDetectMalware
Elastic malicious (moderate confidence)
Cynet Malicious (score: 100)
Cylance Unsafe
Symantec ML.Attribute.HighConfidence
APEX Malicious
Kaspersky UDS:DangerousObject.Multi.Generic
McAfeeD ti!492E4ABC2F6B
SentinelOne Static AI - Suspicious PE
Kingsoft Win32.Troj.Unknown.a
ZoneAlarm UDS:DangerousObject.Multi.Generic
DeepInstinct MALICIOUS
Paloalto generic.ml
CrowdStrike win/malicious_confidence_90% (W)