Advertisement
paladin316

874Loki_53218df645651abc1fd66ad25e6e5b7e_1_2019-09-03_21_30.txt

Sep 3rd, 2019
1,343
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.77 KB | None | 0 0
  1.  
  2. * ID: 874
  3. * MalFamily: "Malicious"
  4.  
  5. * MalScore: 10.0
  6.  
  7. * File Name: "Loki_53218df645651abc1fd66ad25e6e5b7e.1"
  8. * File Size: 933888
  9. * File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  10. * SHA256: "b5c41c424f4ab9381877083a4cad0cfca4bff91994b3630ae1a179f0862689fd"
  11. * MD5: "53218df645651abc1fd66ad25e6e5b7e"
  12. * SHA1: "5fec40e80cc4b287e68af497ed577059b2bc0a32"
  13. * SHA512: "e5e42f9c73bbe373c7d066932a3ed4a9e1f6d0186cf6b03bad77b3dfa91ee1b2667076e12a2c9adc590123f72f81bddc060ff9fe528589c31e416d7b09664dab"
  14. * CRC32: "93BB5D79"
  15. * SSDEEP: "3072:3WynKrQ3vljF6lDZY3nf7IDTsQq1apZbQBQhNPvfqS2anFhDvfDkYhNv:bmQ3dF6ltcnfUPfq4pZbQB+SHUs"
  16.  
  17. * Process Execution:
  18.  
  19. * Executed Commands:
  20.  
  21. * Signatures Detected:
  22.  
  23. "Description": "File has been identified by 21 Antiviruses on VirusTotal as malicious",
  24. "Details":
  25.  
  26. "MicroWorld-eScan": "Gen:Variant.Symmi.86341"
  27.  
  28.  
  29. "FireEye": "Generic.mg.53218df645651abc"
  30.  
  31.  
  32. "Malwarebytes": "Trojan.MalPack.VB.Generic"
  33.  
  34.  
  35. "Cybereason": "malicious.645651"
  36.  
  37.  
  38. "Arcabit": "Trojan.Symmi.D15145"
  39.  
  40.  
  41. "Symantec": "ML.Attribute.HighConfidence"
  42.  
  43.  
  44. "APEX": "Malicious"
  45.  
  46.  
  47. "BitDefender": "Gen:Variant.Symmi.86341"
  48.  
  49.  
  50. "Ad-Aware": "Gen:Variant.Symmi.86341"
  51.  
  52.  
  53. "Sophos": "Mal/FareitVB-N"
  54.  
  55.  
  56. "Invincea": "heuristic"
  57.  
  58.  
  59. "Emsisoft": "Gen:Variant.Symmi.86341 (B)"
  60.  
  61.  
  62. "Cyren": "W32/Wacatac.W.gen!Eldorado"
  63.  
  64.  
  65. "Microsoft": "Trojan:Win32/Wacatac.B!ml"
  66.  
  67.  
  68. "Endgame": "malicious (high confidence)"
  69.  
  70.  
  71. "GData": "Gen:Variant.Symmi.86341"
  72.  
  73.  
  74. "AhnLab-V3": "Trojan/Win32.Inject.R289841"
  75.  
  76.  
  77. "ALYac": "Gen:Variant.Symmi.86341"
  78.  
  79.  
  80. "MAX": "malware (ai score=82)"
  81.  
  82.  
  83. "ESET-NOD32": "a variant of Win32/Injector.EHOJ"
  84.  
  85.  
  86. "Fortinet": "W32/Injector.EHNM!tr"
  87.  
  88.  
  89.  
  90.  
  91.  
  92. * Started Service:
  93.  
  94. * Mutexes:
  95.  
  96. * Modified Files:
  97.  
  98. * Deleted Files:
  99.  
  100. * Modified Registry Keys:
  101.  
  102. * Deleted Registry Keys:
  103.  
  104. * DNS Communications:
  105.  
  106. * Domains:
  107.  
  108. * Network Communication - ICMP:
  109.  
  110. * Network Communication - HTTP:
  111.  
  112. * Network Communication - SMTP:
  113.  
  114. * Network Communication - Hosts:
  115.  
  116. * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement