Summary | ZeroBOX

rkcms.exe

UPX PE64 PE File
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 11, 2024, 10:08 a.m. Sept. 11, 2024, 10:12 a.m.
Size 18.5KB
Type PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows
MD5 06077fd4b5e75f2d730ca61e2bf0f4e7
SHA256 546bd73bca7e70f8597b7841f90214b86c0a04163a6ac0b5023b0ebebe81c043
CRC32 F5D59224
ssdeep 384:G6hkVTL6dQ1lKE8elazyonf87vQu0et5jrgrx:PmVmFfwwtnU7vAet5jk
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Bkav W64.AIDetectMalware
Elastic malicious (high confidence)
Symantec ML.Attribute.HighConfidence
APEX Malicious
McAfeeD ti!546BD73BCA7E
DeepInstinct MALICIOUS
CrowdStrike win/malicious_confidence_90% (D)