popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

307vfz.dll

CoinMiner UPX Malicious Packer PE64 PE File DLL OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 7, 2025, 10:01 a.m. April 7, 2025, 10:04 a.m.
Size 2.1MB
Type PE32+ executable (DLL) (GUI) x86-64, for MS Windows
MD5 483177c2825feb21772af55812324eb0
SHA256 7e7fb4e53d94c7149830027e0c6839d9b32df1a8b8bc548faadddf928a8f76e8
CRC32 26CACFE6
ssdeep 49152:4qaFan6cVbjUoKGD2nQdZh1PvzPLnhLJPIvJPI:VaFG9OoKSRJPgJP
PDB Path C:\Users\Cheetos\Pictures\NEW\SUARESZICK\x64\Release\Bypass Ob45.pdb
Yara
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • IsDLL - (no description)
  • CoinMiner_IN - CoinMiner
  • Malicious_Packer_Zero - Malicious Packer
  • OS_Processor_Check_Zero - OS Processor Check
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Users\Cheetos\Pictures\NEW\SUARESZICK\x64\Release\Bypass Ob45.pdb
section {u'size_of_data': u'0x000a5400', u'virtual_address': u'0x0015d000', u'entropy': 7.606804561110428, u'name': u'.data', u'virtual_size': u'0x000a8228'} entropy 7.60680456111 description A section with a high entropy has been found
entropy 0.313344394406 description Overall entropy of this PE file is high
Bkav W32.Common.14AE9445
Lionic Trojan.Win32.GameHack.4!c
Cynet Malicious (score: 100)
CAT-QuickHeal Trojan.Ghanarava.1743805667324eb0
ALYac Trojan.GenericKDZ.109151
Cylance Unsafe
VIPRE Trojan.GenericKDZ.109151
CrowdStrike win/malicious_confidence_70% (W)
BitDefender Trojan.GenericKDZ.109151
K7GW Unwanted-Program ( 005ae9e91 )
K7AntiVirus Unwanted-Program ( 005ae9e91 )
Arcabit Trojan.Generic.D1AA5F
Paloalto generic.ml
Symantec Trojan.Gen.MBT
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/Agent_AGen.CRH
Avast Win64:MalwareX-gen [Trj]
ClamAV Win.Malware.Lazy-10033364-0
MicroWorld-eScan Trojan.GenericKDZ.109151
Rising PUF.GameHack!8.223 (TFE:5:pD0pfqlkBMQ)
Emsisoft Trojan.GenericKDZ.109151 (B)
F-Secure Trojan.TR/Agent_AGen.tbzke
Zillya Trojan.GameHackAGen.Win64.312
Trapmine malicious.moderate.ml.score
CTX dll.trojan.agen
Sophos Generic Reputation PUA (PUA)
FireEye Trojan.GenericKDZ.109151
Webroot W32.Malware.gen
Google Detected
Avira TR/Agent_AGen.tbzke
Antiy-AVL GrayWare[AdWare]/Win32.Puwaders
Kingsoft Win32.Troj.fuery.v
Gridinsoft Hack.Win64.GameHack.oa!s1
Microsoft Program:Win32/Wacapew.C!ml
GData Trojan.GenericKDZ.109151
Varist W64/ABTrojan.ZBEZ-6477
AhnLab-V3 Malware/Win.Generic.C5660713
Malwarebytes HackTool.GameHack
Ikarus Trojan.Win32.Generic
TrendMicro-HouseCall TROJ_GEN.R002H09A925
Tencent Malware.Win32.Gencirc.10c08caa
huorong Trojan/Zusy.i
Fortinet Adware/GameHack_AGen
AVG Win64:MalwareX-gen [Trj]
Panda Trj/GdSda.A
alibabacloud Trojan:Win/Agent_AGen.CVG