popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

installPG.dll

Emotet Gen1 PhysicalDrive Generic Malware UPX Malicious Library Malicious Packer PE File OS Processor Check PE32 DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Nov. 13, 2024, 1:56 p.m. Nov. 13, 2024, 2:04 p.m.
Size 2.1MB
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 5ae27c0cf40c4eb6450b99af10ce9750
SHA256 6cefeb0900b06a47ddc8c2c5549ab9264caa795d9f60c21d92275011f344950f
CRC32 B3AF4A17
ssdeep 24576:4vL4MFUEdpHVzXKWHoBpHEjVweSRHYU/L38dsh0Dt/oPf2Du4yOQ:4jRRpHNdInHdUU/z0Vlw
Yara
  • PhysicalDrive_20181001 - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Malicious_Packer_Zero - Malicious Packer
  • IsDLL - (no description)
  • Win32_Trojan_Emotet_1_Zero - Win32 Trojan Emotet
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet
  • IsPE32 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

packer Armadillo v1.xx - v2.xx
name RT_VERSION language LANG_CHINESE filetype data sublanguage SUBLANG_CHINESE_SIMPLIFIED offset 0x0022f058 size 0x00000240
Bkav W32.Common.ABF08E2A
Lionic Trojan.Multi.Generic.ljqi
Cynet Malicious (score: 100)
Skyhigh BehavesLike.Win32.Injector.vh
McAfee Artemis!5AE27C0CF40C
Cylance Unsafe
VIPRE Gen:Variant.Fragtor.605956
CrowdStrike win/malicious_confidence_90% (D)
BitDefender Gen:Variant.Fragtor.605956
K7GW Trojan ( 005b85251 )
K7AntiVirus Trojan ( 005b85251 )
Arcabit Trojan.Fragtor.D93F04
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/Packed.BlackMoon.C suspicious
APEX Malicious
Avast Win32:MalwareX-gen [Trj]
Kaspersky VHO:Trojan.Win32.Convagent.gen
Alibaba Packed:Win32/BlackMoon.1aee91c3
MicroWorld-eScan Gen:Variant.Fragtor.605956
Rising HackTool.UPGDSED!1.D7D0 (CLASSIC)
Emsisoft Gen:Variant.Fragtor.605956 (B)
Zillya Trojan.Convagent.Win32.574265
McAfeeD ti!6CEFEB0900B0
CTX dll.trojan.blackmoon
Sophos Mal/Generic-S
FireEye Gen:Variant.Fragtor.605956
Antiy-AVL Trojan/Win32.Convagent
Xcitium TrojWare.Win32.ServStart.DM@6edgy4
Microsoft Program:Win32/Wacapew.C!ml
ZoneAlarm VHO:Trojan.Win32.Convagent.gen
GData Win32.Trojan.PSE.269QAD
DeepInstinct MALICIOUS
Malwarebytes RiskWare.Agent.EY
Ikarus PUA.BlackMoon
TrendMicro-HouseCall TROJ_GEN.R002H07GV24
MaxSecure Dropper.Dinwod.frindll
Fortinet Riskware/Application
AVG Win32:MalwareX-gen [Trj]
Paloalto generic.ml