Advertisement
paladin316

869Loki_81a022fce6b76d70dc120290ab20ff4d_1_2019-09-03_21_30.txt

Sep 3rd, 2019
1,358
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.25 KB | None | 0 0
  1.  
  2. * ID: 869
  3. * MalFamily: ""
  4.  
  5. * MalScore: 10.0
  6.  
  7. * File Name: "Loki_81a022fce6b76d70dc120290ab20ff4d.1"
  8. * File Size: 929792
  9. * File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  10. * SHA256: "fca807996932f38e5d2463c0f4cd45bd4323ff1cefecd890aad4c957df0ebf08"
  11. * MD5: "81a022fce6b76d70dc120290ab20ff4d"
  12. * SHA1: "f41212b65497f0a1e310478c8a38b885312c79a1"
  13. * SHA512: "281e3579643e397a8915e551875a37bc8203c9cf82b19cdf2a134ab6148c97a0de7c8d2c086e454903f14ed39a25c5ada7627b14dfbd6c26eacca386bbf4aa1f"
  14. * CRC32: "4FFD259E"
  15. * SSDEEP: "3072:sa09URMQKR5jZTbYt96B0Gdd9OUkh15zpgZI9DpB7y4Pbs3xR:eX5jiD6eGdWUiVgaLTu"
  16.  
  17. * Process Execution:
  18.  
  19. * Executed Commands:
  20.  
  21. * Signatures Detected:
  22.  
  23. "Description": "File has been identified by 28 Antiviruses on VirusTotal as malicious",
  24. "Details":
  25.  
  26. "MicroWorld-eScan": "Gen:Variant.Ursu.259226"
  27.  
  28.  
  29. "ALYac": "Gen:Variant.Ursu.259226"
  30.  
  31.  
  32. "Cybereason": "malicious.ce6b76"
  33.  
  34.  
  35. "Arcabit": "Trojan.Ursu.D3F49A"
  36.  
  37.  
  38. "Symantec": "ML.Attribute.HighConfidence"
  39.  
  40.  
  41. "ESET-NOD32": "a variant of Win32/Injector.EHNM"
  42.  
  43.  
  44. "APEX": "Malicious"
  45.  
  46.  
  47. "Paloalto": "generic.ml"
  48.  
  49.  
  50. "Kaspersky": "UDS:DangerousObject.Multi.Generic"
  51.  
  52.  
  53. "BitDefender": "Gen:Variant.Ursu.259226"
  54.  
  55.  
  56. "Avast": "FileRepMalware"
  57.  
  58.  
  59. "Ad-Aware": "Gen:Variant.Ursu.259226"
  60.  
  61.  
  62. "Emsisoft": "Gen:Variant.Ursu.259226 (B)"
  63.  
  64.  
  65. "Invincea": "heuristic"
  66.  
  67.  
  68. "FireEye": "Generic.mg.81a022fce6b76d70"
  69.  
  70.  
  71. "Sophos": "Mal/FareitVB-N"
  72.  
  73.  
  74. "SentinelOne": "DFI - Suspicious PE"
  75.  
  76.  
  77. "MAX": "malware (ai score=80)"
  78.  
  79.  
  80. "Microsoft": "Trojan:Win32/Wacatac.B!ml"
  81.  
  82.  
  83. "Endgame": "malicious (high confidence)"
  84.  
  85.  
  86. "ZoneAlarm": "UDS:DangerousObject.Multi.Generic"
  87.  
  88.  
  89. "GData": "Gen:Variant.Ursu.259226"
  90.  
  91.  
  92. "Acronis": "suspicious"
  93.  
  94.  
  95. "Cylance": "Unsafe"
  96.  
  97.  
  98. "eGambit": "Unsafe.AI_Score_95%"
  99.  
  100.  
  101. "AVG": "FileRepMalware"
  102.  
  103.  
  104. "CrowdStrike": "win/malicious_confidence_80% (D)"
  105.  
  106.  
  107. "Qihoo-360": "HEUR/QVM03.0.9E97.Malware.Gen"
  108.  
  109.  
  110.  
  111.  
  112.  
  113. * Started Service:
  114.  
  115. * Mutexes:
  116.  
  117. * Modified Files:
  118.  
  119. * Deleted Files:
  120.  
  121. * Modified Registry Keys:
  122.  
  123. * Deleted Registry Keys:
  124.  
  125. * DNS Communications:
  126.  
  127. * Domains:
  128.  
  129. * Network Communication - ICMP:
  130.  
  131. * Network Communication - HTTP:
  132.  
  133. * Network Communication - SMTP:
  134.  
  135. * Network Communication - Hosts:
  136.  
  137. * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement