popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

sound.exe

Malicious Packer UPX Malicious Library PE64 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6403_us Dec. 4, 2024, 4:12 p.m. Dec. 4, 2024, 4:14 p.m.
Size 4.8MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 770bc9a9a9ff4284b8cb6e333478d25c
SHA256 6a915f0e2eaa35eb47d70a933a4d8822d65e64ebea485d9dcb5657f1f4bd1cf8
CRC32 7FF6BA3D
ssdeep 49152:phizG03sNtvZdvbOjJPmpH5q9HOvLv5Fe1n5E4Gp9zSYpjvhZj:phiNya1+DfLvzQE3NSYRvhZ
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section .symtab
Bkav W64.AIDetectMalware
Skyhigh BehavesLike.Win64.Trojan.rh
Cylance Unsafe
Symantec ML.Attribute.HighConfidence
Elastic malicious (moderate confidence)
Kaspersky Trojan-PSW.Win64.Disco.iig
Alibaba TrojanPSW:Win64/Disco.2c3d7adc
McAfeeD ti!6A915F0E2EAA
SentinelOne Static AI - Suspicious PE
Kingsoft Win64.Trojan-PSW.Disco.iig
DeepInstinct MALICIOUS
Malwarebytes Malware.AI.1688152450
Tencent Win64.Trojan-QQPass.QQRob.Bkjl
Fortinet W32/PossibleThreat
Paloalto generic.ml