popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

moi.exe

Gen1 Generic Malware Malicious Library UPX Anti_VM PE64 PE File OS Processor Check ZIP Format DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 26, 2024, 9:48 a.m. Sept. 26, 2024, 9:56 a.m.
Size 7.4MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 1fb9195294d3f2c24f8a938c6c8d1628
SHA256 48a3558f5c4f4125d7ce5ef8c71239c674123ac0147b6c202a92977493b0c5b5
CRC32 AF1F56D3
ssdeep 196608:g9jGV2q1BKA1HeT39IigwRTet4Q4G/NsIlyzWXkRMY3o9W+:aGV2Kj1+TtIiFRS1NsIszWXGro8
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
file C:\Users\test22\AppData\Local\Temp\_MEI26562\libssl-3.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\libcrypto-3.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\libffi-8.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\python312.dll
file C:\Users\test22\AppData\Local\Temp\_MEI26562\VCRUNTIME140.dll
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
Cynet Malicious (score: 100)
Skyhigh BehavesLike.Win64.Agent.wc
ALYac Gen:Variant.Zusy.554882
Cylance Unsafe
VIPRE Gen:Variant.Zusy.554882
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (D)
BitDefender Gen:Variant.Zusy.554882
Arcabit Trojan.Zusy.D87782
Elastic malicious (high confidence)
APEX Malicious
Avast Win64:Malware-gen
Alibaba Trojan:Win64/Genric.190b82b2
MicroWorld-eScan Gen:Variant.Zusy.554882
Emsisoft Gen:Variant.Zusy.554882 (B)
Zillya Tool.Miner.Win32.1629
McAfeeD ti!48A3558F5C4F
CTX exe.trojan.zusy
FireEye Generic.mg.1fb9195294d3f2c2
Google Detected
Antiy-AVL Trojan/Win32.Agent
Gridinsoft Trojan.Win64.Agent.sa
GData Gen:Variant.Zusy.554882
Varist W64/ABTrojan.MKHL-6905
McAfee Artemis!1FB9195294D3
DeepInstinct MALICIOUS
TrendMicro-HouseCall TROJ_GEN.R002H09IP24
huorong Trojan/Python.ShellLoader.am
Fortinet W32/PossibleThreat
AVG Win64:Malware-gen
Paloalto generic.ml
alibabacloud Trojan:Win/Zusy.Gen