Sysprox.sys

Classification: Malicious

Sysprox.sys is a potentially unwanted program (Windows 64-bit executable, 30.1 KB). Detected by 21 antivirus engines. Linked to Embargo malware.

Detection summary

  • 21 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: EMBARGO (S1247)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Embargo MalwareBazaar Abuse.ch 2026-06-04 14:51:16 2026-06-04 14:51:16 malicious-activity S1247 Embargo
Generic Malware Hybrid-Analysis 2024-10-28 09:30:04 2024-10-28 11:00:12

Sample information

Filenames
023d722cbbdd04e3db77de7e6e3cfeabcef21ba5b2f04c3f3a33691801dd45eb, Sysprox.sys
File type
PE32+ executable (native) x86-64, for MS Windows
Size
30864 bytes
MD5
8c8c93a6b6c6d6e632a54877fc1a209e
SHA-1
7310d6399683ba3eb2f695a2071e0e45891d743b
SHA-256
023d722cbbdd04e3db77de7e6e3cfeabcef21ba5b2f04c3f3a33691801dd45eb
First indexed
2024-10-28 09:24:01
Last updated
2026-07-30 22:56:51

Antivirus detections

EngineDetection
ESET-NOD32Win64/ITMSystem.A potentially unsafe
RisingPUA.ITMSystem!8.1B27A (CLOUD)
XcitiumApplicUnwnt@#1lfrgdwgtij5b
CAT-QuickHealTrojan.Ghanarava.17518389611a209e
CTXsys.trojan.itmsystem
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebTool.VulnDriver.11
ESET-NOD32Win64/VulnDriver.ITMSystem.A potentially unsafe application
GoogleDetected
K7AntiVirusUnwanted-Program ( 005d90971 )
K7GWUnwanted-Program ( 005d90971 )
LionicTrojan.Win32.ITMSystem.4!c
MaxSecureTrojan.Malware.325821571.susgen
McAfeeDti!023D722CBBDD
MicrosoftTrojan:Win32/Alevaul!rfn
RisingPUF.ITMSystem!8.1B27A (TFE:5:IqY748UMjCN)
SophosGeneric Reputation PUA (PUA)
TrellixENSArtemis!8C8C93A6B6C6
VaristW64/ABApplication.VWVN-3110
alibabacloudTrojan:Win/ITMSystem.A