MALICIOUS — 43e1d3ac7a18b73a80298791a9bf3f084c244873bd8e8a5894b35baf09e6647f

MALICIOUS — 43e1d3ac7a18b73a80298791a9bf3f084c244873bd8e8a5894b35baf09e6647f is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (72/100), attributed to the EYLR family. 3 of 25 detection engines flagged it.

Identification

• SHA-256: 43e1d3ac7a18b73a80298791a9bf3f084c244873bd8e8a5894b35baf09e6647f
• SHA-1: efbafcaa4532f3d3a38c7ca7b70cccb30cb4cb9b
• MD5: eaa648f307acba45bdcf759d1f2dfd2a
• imphash: 802dcac7aab948c19738ba3df9f356d9
• ssdeep: 3072:Ur2rMrIrMrcrMrIrMrqrMrIrMrcrMrIr:
• TLSH: T15144A66705A19D9BF617D6FB5480CF0D28F2E4F899B701D81E82DC0DA67CC5328A920E
• Submitted as: 43e1d3ac7a18b73a80298791a9bf3f084c244873bd8e8a5894b35baf09e6647f
• File type: pe · Size: 262144 bytes
• Verdict: malicious (72/100) · Family: EYLR

Detections (3 of 25 engines)

• Microsoft Defender: Trojan:Win32/Zexa.WE!MTB
• Emsisoft (Emergency Kit): Trojan.Agent.EYLR
• Kaspersky (KVRT): Trojan.Win32.Agentb.kntn

Why this verdict

The malicious score of 72/100 is the fusion of 2 weighted signals:

• Microsoft Defender flagged Trojan:Win32/Zexa.WE!MTB (rule Trojan:Win32/Zexa.WE!MTB) - engine signal, weight 0.55, confidence 0.85
• Emsisoft (Emergency Kit) flagged Trojan.Agent.EYLR (rule Trojan.Agent.EYLR) - engine signal, weight 0.55, confidence 0.85

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

File paths

• C:\Users\

More EYLR samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report