popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

rk.exe

Generic Malware Malicious Library UPX Malicious Packer PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 11, 2024, 10:08 a.m. Sept. 11, 2024, 10:16 a.m.
Size 141.0KB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 1da75b8429618aa83d899fc16e59f834
SHA256 b8d90a6e3d811e7bee3d8827bfb19f5cb5c03696c15f911db475b4497c386274
CRC32 CDBF6C85
ssdeep 3072:dmOLKlz7mL0Y1SNxgLBiu2T2F8fLTmxa:dmOLKV7mLmuLBi3T2cax
PDB Path xor_loader.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path xor_loader.pdb
Cynet Malicious (score: 99)
Sangfor Trojan.Win32.Save.a
Elastic malicious (moderate confidence)
F-Secure Heuristic.HEUR/AGEN.1375022
McAfeeD ti!B8D90A6E3D81
Avira HEUR/AGEN.1375022