popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

KYNIX 24255.jar

ZIP Format
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Feb. 10, 2025, 4:34 p.m. Feb. 10, 2025, 4:36 p.m.
Size 270.3KB
Type Zip archive data, at least v2.0 to extract
MD5 c48786041bfbc49cd7a4ac809e1f89fb
SHA256 9b06f513705fd1f58888d74326cfb7c37daa41855e977ceb103e929398dab233
CRC32 4327D06D
ssdeep 6144:emTpRn5nfSWk9dPUQDytmwdj1AyWKnwwSK1K:3Rn5fSWk9dNidj1lVFK
Yara
  • zip_file_format - ZIP file format

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

 process_identifier: 2588
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 1
length: 2555904
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0000000002520000
process_handle: 0xffffffffffffffff
1 0 0
ClamAV Java.Malware.CVE_2021_44228-9915819-0
Symantec Java.Strrat
ESET-NOD32 multiple detections
Kaspersky HEUR:Trojan.Java.Generic
Alibaba TrojanSpy:JAVA/Agent_AGen.93ba1c7b
Sophos Java/RAT-IO
Google Detected
Varist Kryptik.M.gen!Eldorado
Fortinet Java/Agent.AF!tr.spy
count 3055 name heapspray process java.exe total_mb 763 length 262144 protection PAGE_READWRITE