Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6401	March 14, 2021, 11:42 a.m.	March 14, 2021, 11:45 a.m.

Size	493.0KB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`212b12e2686111514455c97b689c8457`
SHA256	`a8fe17654d8f2a952fee93bd6e78864ee4a2e766c92e6ba7dda2b0117e1ef97a`
CRC32	`23DF3F99`
ssdeep	`6144:PnL0GwFG8EdSpx4y3vwKe94genAvlXKJo7OcbV0cDfKBrIteh4bwmsaEYah+CthW:P6FG8uSpB3vW95vcOZbyB0Y4bwmoXhz`
PDB Path	C:\ber68 vedecapin-majejutare\sanumum.pdb_1581432200\bin\vakazukan.pdb`G6G
Yara	PE_Header_Zero - PE File Signature Zero Raccoon_Stealer_1_Zero - Raccoon Stealer win_mutex - Create or check mutex win_files_operation - Affect private profile IsPE32 - (no description) IsWindowsGUI - (no description) IsPacked - Entropy Check HasDebugData - DebugData Check HasRichSignature - Rich Signature Check

5.exe "C:\Users\test22\AppData\Local\Temp\5.exe"
1016

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

This executable has a PDB path (1 event)

pdb_path

C:\ber68 vedecapin-majejutare\sanumum.pdb_1581432200\bin\vakazukan.pdb`G6G

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 25336701 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1
__exception__ March 14, 2021, 11:42 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _lifan@8+0x1e52 5+0x709a2 @ 0x4709a2 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1636692 registers.edi: 3014656 registers.eax: 4294967288 registers.ebp: 1636744 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 2648	1

Allocates read-write-execute memory (usually to unpack itself) (1 event)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory March 14, 2021, 11:42 a.m.	process_identifier: 1016 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 397312 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x002fa000 process_handle: 0xffffffff	1	0	0

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section

{u'size_of_data': u'0x0006fe00', u'virtual_address': u'0x00001000', u'entropy': 7.948196869900976, u'name': u'.text', u'virtual_size': u'0x0006fd14'}

entropy

7.9481968699

description

A section with a high entropy has been found

entropy

0.909552845528

description

Overall entropy of this PE file is high

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ March 14, 2021, 11:43 a.m.	tid: 2648 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 46 AntiVirus engines on VirusTotal as malicious (46 events)

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
ClamAV	Win.Malware.Bulz-9840811-0
ALYac	Trojan.GenericKDZ.73494
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0056f9be1 )
Alibaba	Trojan:Win32/Kryptik.40b6c3ee
K7GW	Trojan ( 0056f9be1 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Kryptik.DOJ.gen!Eldorado
ESET-NOD32	a variant of Win32/Kryptik.HJXL
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Chapak.gen
BitDefender	Trojan.GenericKD.36499866
MicroWorld-eScan	Trojan.GenericKD.36499866
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Trojan.GenericKD.36499866
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Trojan.gc
FireEye	Generic.mg.212b12e268611151
Emsisoft	Trojan.GenericKD.36499866 (B)
SentinelOne	Static AI - Malicious PE
GData	Trojan.GenericKD.36499866
eGambit	Unsafe.AI_Score_64%
Gridinsoft	Trojan.Win32.Packed.oa
Arcabit	Trojan.Generic.D22CF19A
AegisLab	Trojan.Win32.Bulz.4!c
ZoneAlarm	HEUR:Trojan.Win32.Chapak.gen
Microsoft	Trojan:Win32/Guloader.AV!MTB
AhnLab-V3	CoinMiner/Win.Glupteba.R371604
Acronis	suspicious
McAfee	Packed-GDK!212B12E26861
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.613049180
TrendMicro-HouseCall	Trojan.Win32.GLUPTEBA.THCABBA
Rising	Trojan.Kryptik!8.8 (CLOUD)
Ikarus	Trojan-Banker.UrSnif
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Packed.GDK!tr
BitDefenderTheta	Gen:NN.ZexaF.34608.EqW@aia72sV
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/Genetic.gen
Qihoo-360	Win32/Trojan.Generic.HwoC3IMA

5.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All