The Vega X Dev Mode zip File Malware Analysis

Technical Analysis

File Name	Vega X Dev Mode.zip
File Type	ZIP
Magic Bytes	`Zip archive data, at least v2.0 to extract, compression method=store`
SSDEEP Hash	786432:4PTe86gkO5epGZ+xIiv8dkY5hocZylJNDjECrbE4/qeNepSH+0oVa5:4PTe86g9epZubtejEcv/oSe85
Scanner Version	1.0.178.174
Database Version	2024-06-01 08:00:40 UTC

⚠

Suspicious File Detected

Detected by 34 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

Lazy is a Trojan designed to download and install additional malware payloads on infected systems while operating with stealth techniques.

52%

Detection Rate

45,014,825

File Size (bytes)

34/65

Engines Detected

2024-06-01

Analysis Date

File Identification

Hash Type	Value	Action
MD5	e6ee01480cf9daf82e34d03f840581d6
SHA1	dc1330733028c6c3151fb6f08d2b3c2c64d47238
SHA256	992057e88c9e6bab5cfa15460ba7a8dfaedb56f25f32887820bdc38ec4e314bd
SHA512	9accec551e191b23f9e23ce117ed01fb5687e7cbe038424e53ec59df0ff2b27e39a566c2a4014e0e4d8abe387673f96826a1a76b09c4a4014f276337ea6b4b29

Security Engines with Detections (34 of 65)

Lionic

Trojan.ZIP.Generic.4!c Malicious

CAT-QuickHeal

Trojan.Agent Malicious

Skyhigh

GenericRXUU-KB!8217036F0123 Malicious

McAfee

Artemis!CDF73079A630 Malicious

Zillya

Trojan.Greedy.Win32.540 Malicious

K7AntiVirus

Trojan ( 0059f3ca1 ) Malicious

Alibaba

Trojan:MSIL/Malgent.66dd040a Malicious

K7GW

Trojan ( 0059f3ca1 ) Malicious

Symantec

Trojan.Gen.NPE Malicious

Elastic

malicious (high confidence) Malicious

ESET-NOD32

a variant of Generik.CPFLUU Malicious

Avast

Win32:Evo-gen [Trj] Malicious

BitDefender

Gen:Variant.Lazy.367531 Malicious

Rising

Trojan.Zusy!8.10EDD (CLOUD) Malicious

Emsisoft

Gen:Variant.Lazy.367531 (B) Malicious

F-Secure

Trojan.TR/Redcap.htimx Malicious

VIPRE

Gen:Variant.Lazy.367531 Malicious

FireEye

Gen:Variant.Lazy.367531 Malicious

Sophos

Generic Reputation PUA (PUA) Malicious

SentinelOne

Static AI - Malicious Archive Malicious

GData

IL:Trojan.MSILZilla.87070 Malicious

Kingsoft

Win32.Troj.Undef.a Malicious

Microsoft

Trojan:Win32/Malgent Malicious

Gridinsoft

Trojan.Win32.Packed.ns Malicious

Arcabit

Trojan.Lazy.D59BAB [many] Malicious

Google

Detected Malicious

MAX

malware (ai score=86) Malicious

Panda

Trj/Chgt.AD Malicious

Ikarus

Trojan-Spy.Zbot Malicious

MaxSecure

Trojan.Malware.248603878.susgen Malicious

Fortinet

Riskware/Application Malicious

AVG

Win32:Evo-gen [Trj] Malicious

DeepInstinct

MALICIOUS Malicious

alibabacloud

Trojan:Unknow/Zusy Malicious

31 engines reported no threats - Only engines with detections are shown above for clarity

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

34 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

The Vega X Dev Mode.zip File Analysis

Technical Analysis

Suspicious File Detected

Scan Another File

File Identification

Security Engines with Detections (34 of 65)

Remember: This is Result of Online Virus Scanner

Keep Your System Protected

Leave a Comment

Gridinsoft Anti-Malware