Summary | ZeroBOX

raw_cbot.exe

Malicious Packer Malicious Library PE64 PE File
Category Machine Started Completed
FILE s1_win7_x6401 April 13, 2025, 3:18 p.m. April 13, 2025, 3:23 p.m.
Size 58.5KB
Type PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5 e985d78da4b489d29dbe69bda2f35a66
SHA256 efe81402806e0080f3f715d8184153487c4f0997652be637f00607fc6608a26f
CRC32 392A0423
ssdeep 768:F1T6NWqo2nAjU8BNsZMoG0hsGxZRx8pUlRsXvshuvr1b0S608XCnQl+quXfM:XT/72AB0BDz0elk0cvraQFm3
Yara
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • IsPE64 - (no description)
  • Malicious_Packer_Zero - Malicious Packer

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
123.253.61.24 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

host 123.253.61.24
Lionic Trojan.Win32.Generic.4!c
Cynet Malicious (score: 99)
CAT-QuickHeal Trojan.Ghanarava.1744459309f35a66
Skyhigh Artemis!Trojan
ALYac Gen:Variant.Barys.431553
Cylance Unsafe
VIPRE Gen:Variant.Barys.431553
Sangfor Trojan.Win64.Agent.Vlxw
CrowdStrike win/malicious_confidence_90% (D)
BitDefender Gen:Variant.Barys.431553
K7GW Trojan ( 005c58731 )
K7AntiVirus Trojan ( 005c58731 )
Arcabit Trojan.Barys.D695C1
Symantec ML.Attribute.HighConfidence
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/Agent_AGen.DKM
Avast Win64:MalwareX-gen [Misc]
Kaspersky UDS:DangerousObject.Multi.Generic
MicroWorld-eScan Gen:Variant.Barys.431553
Rising Trojan.Generic!8.C3 (CLOUD)
Emsisoft Gen:Variant.Barys.431553 (B)
F-Secure Trojan.TR/AVI.Agent.xvgra
McAfeeD ti!EFE81402806E
CTX exe.trojan.barys
Sophos Generic Reputation PUA (PUA)
Google Detected
Avira TR/AVI.Agent.xvgra
Antiy-AVL Trojan[Ransom]/MSIL.HiddenTear
Microsoft Ransom:MSIL/HiddenTear!rfn
GData Gen:Variant.Barys.431553
Varist W64/ABTrojan.FIGG-6150
AhnLab-V3 Trojan/Win.Generic.R700125
McAfee Artemis!E985D78DA4B4
DeepInstinct MALICIOUS
Malwarebytes Trojan.Dropper
Ikarus Trojan.Win64.Agent
Panda Trj/Agent.RP
TrendMicro-HouseCall TROJ_GEN.R002H09DB25
Tencent Win64.Trojan.Generic.Gwnw
Fortinet W32/PossibleThreat
AVG Win64:MalwareX-gen [Misc]
Paloalto generic.ml
alibabacloud Trojan:Win/Barys.Gen