CLEAN — 3444c8462e764f88027f3334af9fa278415960ed40517159f9b793cedfb6c650

CLEAN — 3444c8462e764f88027f3334af9fa278415960ed40517159f9b793cedfb6c650 is a pe sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (25/100). 4 of 55 detection engines flagged it.

Identification

• SHA-256: 3444c8462e764f88027f3334af9fa278415960ed40517159f9b793cedfb6c650
• SHA-1: 4f4a3afe9ea3f7c3197b3a17641daa66397c03e9
• MD5: 1ef899c933b94f10fdc4b52fdde41261
• imphash: 558aafb506cd5e63ae62ea084804d1a7
• ssdeep: 1536:M3TiHsu0Tg+SkmidgaBVfpmtaoOPLAxzhy9FTsWjcdaFf34rAW1cgxY:M3GAT8q5/fUxLiFcaFP4r/zY
• TLSH: T1B2396C9C42361341E37BEF62AE01290E10A5B0CD257DB86A0E87C53F36FA57BAC75185
• Submitted as: 3444c8462e764f88027f3334af9fa278415960ed40517159f9b793cedfb6c650
• File type: pe · Size: 91136 bytes
• Verdict: clean (25/100)

Detections (4 of 55 engines)

• YARA: Yara-Rules community: YR_AntiDebug_Checks
• Microsoft Defender: Trojan:Win32/SpyNoon.PDS!MTB
• Emsisoft (Emergency Kit): Trojan.Ransom.Loki.DHG
• Kaspersky (KVRT): UDS:Trojan.Win32.Inject.anwry

Why this verdict

The clean score of 25/100 is the fusion of 1 weighted signal:

• YARA: Yara-Rules community flagged YR_AntiDebug_Checks (rule YR_AntiDebug_Checks) - engine signal, weight 0.35, confidence 0.70

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

File paths

• C:\xampp\htdocs\Loct\e1e9c5c037384578a9c301eaca4a5afa\Loader\zapmdlzz\Release\zapmdlzz.pdb

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report