Summary | ZeroBOX

responsibilityleadpro.exe

Generic Malware Malicious Library UPX PE64 PE File OS Processor Check
Category Machine Started Completed
FILE s1_win7_x6403_us Sept. 9, 2024, 10:08 a.m. Sept. 9, 2024, 10:10 a.m.
Size 2.3MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 d1fd7bf0ef1ef17007005c4d86c27d03
SHA256 d9cea34db0d1dc016dd4007d8cd11416f095c41b0639f13af1eb6ad675651df2
CRC32 04408CAB
ssdeep 24576:0v/zFZoB+sFtb/y/aXNfAYs7hyWJFwqJyXxuGpIXGCQu/81dpVJ8cSrtAsl8d1Wg:0v/zroQwpOzT+vpRXbP/mpU5U
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

__exception__

stacktrace:
responsibilityleadpro+0x1f6f00 @ 0x13f446f00
responsibilityleadpro+0x2311ca @ 0x13f4811ca
BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76fd652d
RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x776ec521

exception.instruction_r: f3 aa 48 8b 84 24 40 6e 00 00 48 8b 8c 24 08 44
exception.symbol: responsibilityleadpro+0x1f6f00
exception.instruction: stosb byte ptr [rdi], al
exception.module: responsibilityleadpro.exe
exception.exception_code: 0xc0000005
exception.offset: 2060032
exception.address: 0x13f446f00
registers.r14: 0
registers.r15: 0
registers.rcx: 331877
registers.rsi: 0
registers.r10: 0
registers.rbx: 0
registers.rsp: 2555808
registers.r11: 518
registers.r8: 2383160
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 0
registers.rdi: 0
registers.rax: 0
registers.r13: 0
1 0 0
Bkav W64.AIDetectMalware
Elastic malicious (high confidence)
ALYac Gen:Variant.Lazy.598188
Cylance Unsafe
VIPRE Gen:Variant.Lazy.598188
BitDefender Gen:Variant.Lazy.598188
Arcabit Trojan.Lazy.D920AC
APEX Malicious
MicroWorld-eScan Gen:Variant.Lazy.598188
Emsisoft Gen:Variant.Lazy.598188 (B)
FireEye Generic.mg.d1fd7bf0ef1ef170
SentinelOne Static AI - Suspicious PE
MAX malware (ai score=86)
Microsoft Program:Win32/Wacapew.C!ml
GData Gen:Variant.Lazy.598188
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_60% (D)