popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

niox.exe

Gen1 Generic Malware Malicious Library UPX PE64 PE File OS Processor Check ZIP Format DLL
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 March 7, 2025, 9:41 a.m. March 7, 2025, 9:47 a.m.
Size 8.1MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 8333cfbd03a35fc6a741b3d87d5cc24a
SHA256 084f4a584c307eeff819668e4d5d72c1dcb70bb4b4c81aa62d6d59f631c25b29
CRC32 DC6BFAC1
ssdeep 196608:SGY3hEVtOshoKMuIkhVastRL5Di3unSEC1DVNhl:bY3yVtOshouIkPftRL54XL3Nhl
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • Win32_Trojan_Gen_1_0904B0_Zero - Win32 Trojan Emotet
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

IsDebuggerPresent

 0 0
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

 process_identifier: 2544
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 4096
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x000000007304c000
process_handle: 0xffffffffffffffff
1 0 0
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-stdio-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-heap-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-process-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-profile-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-memory-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-runtime-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-processenvironment-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-sysinfo-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-utility-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\VCRUNTIME140.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-synch-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-namedpipe-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-heap-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-time-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-conio-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-file-l1-2-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\python311.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\ucrtbase.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-util-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-datetime-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-processthreads-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-synch-l1-2-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-string-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-processthreads-l1-1-1.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-interlocked-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\libssl-3.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-file-l2-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-math-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-errorhandling-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-environment-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-localization-l1-2-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-convert-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-libraryloader-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-handle-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-timezone-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\rar.exe
file C:\Users\test22\AppData\Local\Temp\_MEI25442\libcrypto-3.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-string-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-rtlsupport-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-filesystem-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\libffi-8.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\sqlite3.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-debug-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-console-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-crt-locale-l1-1-0.dll
file C:\Users\test22\AppData\Local\Temp\_MEI25442\api-ms-win-core-file-l1-1-0.dll
Bkav W64.AIDetectMalware
Lionic Trojan.Win64.Disco.tsI4
Cynet Malicious (score: 100)
CAT-QuickHeal cld.trojanspy.agent
Skyhigh BehavesLike.Win64.Generic.rc
ALYac Dropped:Generic.Znyonm.B.46984ABB
Cylance Unsafe
VIPRE Dropped:Generic.Znyonm.B.46984ABB
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Dropped:Generic.Znyonm.B.46984ABB
Arcabit Generic.Znyonm.B.DB788ABB
Symantec Scr.Malcode!gen129
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/Packed.PyInstaller.O suspicious
APEX Malicious
Avast Win32:Agent-BDOJ [Trj]
Kaspersky Trojan-Spy.Win32.Agent.dffz
Alibaba Packed:Win32/PyInstaller.b7be0928
MicroWorld-eScan Dropped:Generic.Znyonm.B.46984ABB
Rising Spyware.Agent/PYC!1.EA8F (CLASSIC)
Emsisoft Dropped:Generic.Znyonm.B.46984ABB (B)
F-Secure Trojan.TR/Crypt.FKM.Gen
DrWeb Python.Muldrop.16
McAfeeD ti!084F4A584C30
CTX exe.trojan.generic
Sophos Mal/Generic-S
SentinelOne Static AI - Suspicious PE
FireEye Dropped:Generic.Znyonm.B.46984ABB
Google Detected
Avira TR/Crypt.FKM.Gen
Kingsoft Win32.Trojan-Spy.Agent.dffz
Microsoft Trojan:Win32/Phonzy.B!ml
GData Dropped:Generic.Znyonm.B.46984ABB
Varist W64/Agent.IMI.gen!Eldorado
AhnLab-V3 Trojan/Win.Generic.R683382
McAfee Artemis!8333CFBD03A3
DeepInstinct MALICIOUS
Malwarebytes Generic.Malware.Agent.DDS
Ikarus Trojan.Python.SLoader
Panda Trj/Chgt.AD
Tencent Win32.Trojan.Pyinstaller.Szfl
huorong TrojanSpy/Python.Stealer.d
Fortinet W64/PackedPyInstaller.L!tr
AVG Win32:Agent-BDOJ [Trj]
alibabacloud Trojan[spy]:Win/Phonzy.B9nj