popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

22.dll

  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6402 March 22, 2021, 1:16 p.m. March 22, 2021, 1:17 p.m.
Size 380.5KB
Type PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5 649b5c913739cea195c7662ff412b8ce
SHA256 b725a6e174cd448a720f179599290d3f014fd2d1521b8de1ddcf28193ba8d09f
CRC32 7A89251A
ssdeep 6144:HTMsOk36gUZ5UqnU/D+eibiNTUJAyHR4mroBN2urtNcN908/8TP7PHYNJ1oVOA26:HTSgQOVkicAyRjBur48X4NJB56zm+
PDB Path c:\BelieveMetal\WingBad\FootIn\GladRoot\WhoseCrowd\Chance.pdb
Yara
  • PE_Header_Zero - PE File Signature Zero
  • OS_Processor_Check_Zero - OS Processor Check Signature Zero
  • win_files_operation - Affect private profile
  • IsPE32 - (no description)
  • IsDLL - (no description)
  • IsWindowsGUI - (no description)
  • HasDebugData - DebugData Check
  • HasRichSignature - Rich Signature Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path c:\BelieveMetal\WingBad\FootIn\GladRoot\WhoseCrowd\Chance.pdb
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.36433685
FireEye Generic.mg.649b5c913739cea1
CAT-QuickHeal Trojan.Cridex
McAfee Trojan-FRGC!649B5C913739
Cylance Unsafe
Sangfor Trojan.Win32.Cridex.gen
K7AntiVirus Spyware ( 00552cf91 )
Alibaba TrojanSpy:Win32/Ursnif.32410193
K7GW Spyware ( 00552cf91 )
CrowdStrike win/malicious_confidence_100% (W)
Arcabit Trojan.Generic.D22BEF15
Cyren W32/Trojan.QCNZ-3867
Symantec Trojan.Gen.2
Avast Win32:Malware-gen
Kaspersky HEUR:Trojan-Banker.Win32.Cridex.gen
BitDefender Trojan.GenericKD.36433685
NANO-Antivirus Trojan.Win32.Cridex.intjhn
Paloalto generic.ml
ViRobot Trojan.Win32.Z.Wacatac.389632
Rising Spyware.Ursnif!8.1DEF (CLOUD)
Ad-Aware Trojan.GenericKD.36433685
Sophos Mal/Generic-S
Comodo Malware@#n9lfuh33p7k8
VIPRE Trojan.Win32.Generic!BT
TrendMicro TROJ_FRS.VSNTC221
McAfee-GW-Edition Trojan-FRGC!649B5C913739
Emsisoft Trojan.GenericKD.36433685 (B)
Ikarus Trojan-Banker.UrSnif
Antiy-AVL Trojan[Banker]/Win32.Cridex
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft Trojan.Win32.Banker.oa
Microsoft Trojan:Win32/Ursnif.SS!MTB
AegisLab Trojan.Win32.Cridex.7!c
ZoneAlarm HEUR:Trojan-Banker.Win32.Cridex.gen
GData Trojan.GenericKD.36433685
Cynet Malicious (score: 100)
AhnLab-V3 Malware/Win32.Generic.C4349328
ALYac Spyware.Ursnif
MAX malware (ai score=87)
Malwarebytes Trojan.Crypt
ESET-NOD32 Win32/Spy.Ursnif.CT
TrendMicro-HouseCall TROJ_FRS.VSNTC221
Tencent Win32.Trojan-banker.Cridex.Woqd
eGambit Unsafe.AI_Score_89%
Fortinet PossibleThreat.MU
MaxSecure Trojan.Malware.74474672.susgen
AVG Win32:Malware-gen
Panda Trj/GdSda.A
Qihoo-360 Win32/Trojan.Dridex.HgkASQIA