popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Amadeus.exe

Generic Malware Malicious Library UPX Malicious Packer PE File dll OS Processor Check PE32 DllRegisterServer
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 2, 2024, 1:31 p.m. Sept. 2, 2024, 1:33 p.m.
Size 5.3MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 36a627b26fae167e6009b4950ff15805
SHA256 a2389de50f83a11d6fe99639fc5c644f6d4dcea6834ecbf90a4ead3d5f36274a
CRC32 CD6B9857
ssdeep 49152:NXJxAIQfc7wXnJu1U30/jo5UJZUntHvVkgKJswamhqp1ROjyj/2wW0j94lNI/pB+:BAIdik7/junt/2wr3/
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • DllRegisterServer_Zero - execute regsvr32.exe
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .symtab
name RT_VERSION language LANG_CHINESE filetype data sublanguage SUBLANG_CHINESE_TRADITIONAL offset 0x00579708 size 0x00000364
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Lumma.i!c
Elastic malicious (moderate confidence)
Sangfor Dropper.Win32.Agent.V93o
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of WinGo/TrojanDropper.Agent.EK
APEX Malicious
Paloalto generic.ml
Kaspersky Trojan-PSW.Win32.Lumma.bfm
Rising Dropper.Agent!1.10205 (CLASSIC)
TrendMicro Trojan.Win32.AMADEY.YXEIAZ
McAfeeD ti!A2389DE50F83
Trapmine malicious.high.ml.score
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
Jiangmin Server-Proxy.Agent.a
Webroot W32.Malware.Gen
Google Detected
Kingsoft Win32.Troj.Unknown.a
Gridinsoft Spy.Win32.Gen.tr
Microsoft Trojan:Win32/Wacatac.B!ml
ZoneAlarm Trojan-PSW.Win32.Lumma.bfm
GData Win32.Trojan.Agent.LEK0L0
Varist W32/ABRisk.HXEH-8061
AhnLab-V3 Infostealer/Win.LummaC2.C5661024
McAfee Artemis!36A627B26FAE
DeepInstinct MALICIOUS
Ikarus Malware.Win32.Antis
TrendMicro-HouseCall Trojan.Win32.AMADEY.YXEIAZ
Fortinet W32/Agent.EK!tr
alibabacloud Trojan[dropper]:Multi/Agent.EH