The PozeLoader zip File Malware Analysis

Technical Analysis

File Name	PozeLoader.zip
File Type	ZIP
Magic Bytes	`Zip archive data, at least v1.0 to extract, compression method=store`
SSDEEP Hash	393216:Ut5rGVnR4jCqekKSpH38CMFiURXwyZn8Ub936CtjFqenfEQ:UnGVWjMSpX8Ceiv+nBFJQ+fd
Scanner Version	1.0.219.174
Database Version	2025-07-03 13:00:27 UTC

⚠

Suspicious File Detected

Detected by 35 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

52%

Detection Rate

15,856,734

File Size (bytes)

35/67

Engines Detected

2025-07-03

Analysis Date

File Identification

Hash Type	Value	Action
MD5	ea87c6e0e47c6f50167181b44b9b1b8b
SHA1	507ad9b77ac5ac45150123dce380319d18e030e0
SHA256	36ff37c8134e7819fa1f8b44a78e711000736127d944b1f14092bf57cd80e27a
SHA512	be565b930b109db4c50217a62b02b5afd6d7a469f519c20a2ec72e6b5cfad899bf39dd4b82b9d5fdb8b5206a4dc72d81e245380413b5e642a161732cfda7e88a

Security Engines with Detections (35 of 67)

Lionic

Trojan.Win32.GenericKDQ.4!c Malicious

Elastic

malicious (high confidence) Malicious

MicroWorld-eScan

QD:Trojan.GenericKDQ.8571BE3143 Malicious

CAT-QuickHeal

Trojan.Ghanarava.17514364234419eb Malicious

ALYac

QD:Trojan.GenericKDQ.8571BE3143 Malicious

Malwarebytes

Malware.AI.4279925583 Malicious

Zillya

Trojan.Agent.Win64.89527 Malicious

Sangfor

Trojan.Win32.Save.a Malicious

K7GW

Trojan ( 005aeb761 ) Malicious

K7AntiVirus

Trojan ( 005aeb761 ) Malicious

Cynet

Malicious (score: 99) Malicious

TrendMicro-HouseCall

TROJ_GEN.R002C0DFB25 Malicious

Avast

Win64:Evo-gen [Trj] Malicious

Kaspersky

Trojan.Win64.Agent.smeiqp Malicious

BitDefender

QD:Trojan.GenericKDQ.8571BE3143 Malicious

Tencent

Malware.Win32.Gencirc.1489ea81 Malicious

Emsisoft

QD:Trojan.GenericKDQ.8571BE3143 (B) Malicious

F-Secure

Trojan.TR/Redcap.mipkk Malicious

VIPRE

QD:Trojan.GenericKDQ.8571BE3143 Malicious

TrendMicro

TROJ_GEN.R002C0DFB25 Malicious

CTX

zip.trojan.generickdq Malicious

Sophos

Mal/Generic-S Malicious

Varist

W64/ABTrojan.QDDD-6885 Malicious

Avira

TR/Redcap.mipkk Malicious

Antiy-AVL

RiskWare[Packed]/Win32.VMProtect.a Malicious

Arcabit

QD:Trojan.GenericQ.8571BE3143 Malicious

GData

QD:Trojan.GenericKDQ.8571BE3143 Malicious

Google

Detected Malicious

DeepInstinct

MALICIOUS Malicious

TrellixENS

Artemis!6DA0C0ABC335 Malicious

SentinelOne

Static AI - Malicious Archive Malicious

MaxSecure

Trojan.Malware.328790041.susgen Malicious

Fortinet

Riskware/Application Malicious

AVG

Win64:Evo-gen [Trj] Malicious

Panda

Trj/Chgt.AD Malicious

32 engines reported no threats - Only engines with detections are shown above for clarity

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

35 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

The PozeLoader.zip File Analysis

Technical Analysis

Suspicious File Detected

Scan Another File

File Identification

Security Engines with Detections (35 of 67)

Remember: This is Result of Online Virus Scanner

Keep Your System Protected

Leave a Comment

Gridinsoft Anti-Malware