popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

CoinBaseUpdate.exe

Generic Malware Malicious Library UPX Malicious Packer PE File dll OS Processor Check PE32 DllRegisterServer
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Oct. 14, 2024, 10:38 a.m. Oct. 14, 2024, 10:42 a.m.
Size 8.9MB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 93e5096b71b800b873d28fe2c9e825f0
SHA256 4209036f5f98e658e2f62066c77968ccc0937064ca9a7869408c265bbee43b99
CRC32 A6A621C2
ssdeep 49152:we4HNyF1BaIOkqT0qnwGkAa1BLj9O1Q5rseiwVUtiuITu0wMCZUdT7ijZ3M6r0v3:D4HNzkqY3Gk0dDtiuIrdT7IcC0v4+cJ
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • DllRegisterServer_Zero - execute regsvr32.exe
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .symtab
name RT_VERSION language LANG_CHINESE filetype data sublanguage SUBLANG_CHINESE_TRADITIONAL offset 0x0091681c size 0x00000304
section {u'size_of_data': u'0x00002e00', u'virtual_address': u'0x00914000', u'entropy': 7.5988926900682925, u'name': u'.rsrc', u'virtual_size': u'0x00002c9d'} entropy 7.59889269007 description A section with a high entropy has been found
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Lumma.1u!c
Skyhigh BehavesLike.Win32.Trojan.rm
ALYac Spyware.Infostealer.Lumma
Cylance Unsafe
VIPRE Gen:Variant.Lazy.591496
Sangfor Infostealer.Win32.Lumma.Vp1f
BitDefender Gen:Variant.Lazy.591496
K7GW Trojan ( 005b9b1b1 )
K7AntiVirus Trojan ( 005b9b1b1 )
Arcabit Trojan.Lazy.D90688
VirIT Trojan.Win32.Genus.WLH
Symantec Trojan Horse
Elastic malicious (high confidence)
ESET-NOD32 a variant of WinGo/TrojanDropper.Agent.EK
APEX Malicious
Avast Win32:MalwareX-gen [Trj]
Kaspersky Trojan-PSW.Win32.Lumma.bky
Alibaba TrojanPSW:Win32/Lumma.c7f43432
MicroWorld-eScan Gen:Variant.Lazy.591496
Rising Dropper.Agent!1.10205 (CLASSIC)
Emsisoft Gen:Variant.Lazy.591496 (B)
F-Secure Trojan.TR/AVI.Agent.fvurn
DrWeb Trojan.PWS.Lumma.422
Zillya Trojan.Lumma.Win32.686
TrendMicro TrojanSpy.Win32.LUMMASTEALER.YXEIEZ
McAfeeD ti!4209036F5F98
Trapmine malicious.moderate.ml.score
CTX exe.trojan.lumma
Sophos Troj/Inject-JQY
SentinelOne Static AI - Suspicious PE
FireEye Gen:Variant.Lazy.591496
Webroot W32.Infostealer.Lumma
Google Detected
Avira TR/AVI.Agent.fvurn
Antiy-AVL Trojan/Win32.Agent
Kingsoft Win32.Trojan-PSW.Lumma.bky
Xcitium Malware@#nrzbzweszuqs
Microsoft Trojan:Win32/Acll
ZoneAlarm Trojan-PSW.Win32.Lumma.bky
GData Gen:Variant.Lazy.591496
McAfee Artemis!93E5096B71B8
DeepInstinct MALICIOUS
VBA32 Dropper.Wingo.Heur
Malwarebytes Trojan.Dropper.GO.Generic
Ikarus Trojan-Dropper.WinGo.Agent
Panda Trj/Chgt.AD
TrendMicro-HouseCall TrojanSpy.Win32.LUMMASTEALER.YXEIEZ
Tencent Win32.Trojan-QQPass.QQRob.Wmhl
huorong Trojan/Generic!DAA008B74EBD7BA5