popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

fd89b1a215ec3bdaeb410b4e6cae6aacfe275803593ad0bc9d13d53d2d65aefc.exe

UPX OS Processor Check PE64 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Nov. 8, 2024, 11:43 a.m. Nov. 8, 2024, 11:43 a.m.
Size 20.5KB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 685a9baabb0351408643023dc9a37ad6
SHA256 fd89b1a215ec3bdaeb410b4e6cae6aacfe275803593ad0bc9d13d53d2d65aefc
CRC32 1106F0D7
ssdeep 384:FEtEBi7HRV+LzsbHGGLojs9F5Dl6pUMbk+:FE2sxV8sTGLsBRy
PDB Path C:\Users\jose\proyectos\ransomware\update.pdbGCTLP.text$
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Users\jose\proyectos\ransomware\update.pdbGCTLP.text$
section {u'size_of_data': u'0x00002400', u'virtual_address': u'0x00007000', u'entropy': 7.799651086200523, u'name': u'.rsrc', u'virtual_size': u'0x00002348'} entropy 7.7996510862 description A section with a high entropy has been found
entropy 0.461538461538 description Overall entropy of this PE file is high
Bkav W64.AIDetectMalware
Lionic Trojan.Win32.Generic.4!c
VIPRE Gen:Heur.Bodegun.23
CrowdStrike win/malicious_confidence_90% (D)
BitDefender Gen:Heur.Bodegun.23
Arcabit Trojan.Bodegun.23
Elastic malicious (moderate confidence)
APEX Malicious
MicroWorld-eScan Gen:Heur.Bodegun.23
Emsisoft Gen:Heur.Bodegun.23 (B)
Trapmine suspicious.low.ml.score
CTX exe.trojan.bodegun
SentinelOne Static AI - Suspicious PE
FireEye Gen:Heur.Bodegun.23
Antiy-AVL Trojan[Ransom]/Win32.Dcrypt.a
Microsoft Trojan:Win32/Sabsik.FL.A!ml
GData Gen:Heur.Bodegun.23
McAfee Artemis!685A9BAABB03
DeepInstinct MALICIOUS
Ikarus Win32.Outbreak