popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

ReR.exe

Generic Malware Malicious Library Antivirus UPX Malicious Packer PE64 PE File
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 21, 2025, 10:20 a.m. April 21, 2025, 12:38 p.m.
Size 865.5KB
Type PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows
MD5 f3b99592f40e424a2fb51e8f60b98077
SHA256 aa63cf25cfc47e6a53dc1b286e425faa8775ac0311c47ca6c59d1950cfa03251
CRC32 3898D825
ssdeep 24576:862XyfQvJkX7gwS264/8i3a/Hc2VQsNVrlgKueni:862XJvJkX7gwW4/Rb2+shXdn
Yara
  • PE_Header_Zero - PE File Signature
  • Malicious_Library_Zero - Malicious_Library
  • IsPE64 - (no description)
  • Antivirus - Contains references to security software
  • Malicious_Packer_Zero - Malicious Packer
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section {u'size_of_data': u'0x00073200', u'virtual_address': u'0x00058000', u'entropy': 7.886499535337719, u'name': u'.rdata', u'virtual_size': u'0x00073020'} entropy 7.88649953534 description A section with a high entropy has been found
entropy 0.532677848467 description Overall entropy of this PE file is high
Bkav W32.Common.3DBE1849
Lionic Trojan.Win32.Crysan.m!c
Cynet Malicious (score: 99)
CAT-QuickHeal Trojan.Ghanarava.1740476351b98077
Skyhigh BehavesLike.Win64.Injector.cc
ALYac Trojan.GenericKD.75837870
Cylance Unsafe
VIPRE Trojan.GenericKD.75837870
Sangfor Trojan.Win64.Agent.A0fr
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Trojan.GenericKD.75837870
K7GW Trojan ( 005c1a0a1 )
K7AntiVirus Trojan ( 005c1a0a1 )
Arcabit Trojan.Generic.D48531AE
VirIT Trojan.Win64.Agent.HSL
Symantec Trojan Horse
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win64/Kryptik.EWA
Avast Win64:Evo-gen [Trj]
Kaspersky Backdoor.MSIL.Crysan.jsp
Alibaba Backdoor:MSIL/Crysan.6402934a
MicroWorld-eScan Trojan.GenericKD.75837870
Rising Trojan.Kryptik!8.8 (TFE:5:swgtIFjZzO)
Emsisoft Trojan.GenericKD.75837870 (B)
F-Secure Trojan.TR/Crypt.Agent.lfogk
Zillya Trojan.Crysan.Win32.207
McAfeeD ti!AA63CF25CFC4
CTX exe.trojan.crysan
Sophos Mal/Generic-S
FireEye Generic.mg.f3b99592f40e424a
Google Detected
Avira TR/Crypt.Agent.lfogk
Antiy-AVL GrayWare/Win32.Wacapew
Kingsoft MSIL.Backdoor.Crysan.jsp
Xcitium Malware@#8vjyf7d09bqx
Microsoft Trojan:Win32/Znyonm!rfn
GData Trojan.GenericKD.75837870
Varist W64/ABTrojan.VNMR-4033
AhnLab-V3 Trojan/Win.Evo-gen.C5727825
McAfee Artemis!F3B99592F40E
DeepInstinct MALICIOUS
VBA32 TrojanPSW.Rusty
Malwarebytes Trojan.Dropper
Ikarus Trojan-PSW.Agent
Panda Trj/Agent.AEZG
Tencent Malware.Win32.Gencirc.143244e8
Yandex Backdoor.Crysan!Gq3KUDISBxo
huorong HVM:VirTool/Obfuscator.h
MaxSecure Trojan.Malware.8426628.susgen
Fortinet W64/GenKryptik.HGGK!tr