Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- * MalFamily: ""
- * MalScore: 4.5
- * File Name: "Loki_0550e266e7acf0cad62eecd57969f7c0.exe"
- * File Size: 255408
- * File Type: "PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive"
- * SHA256: "0becbdd6dfa1e9aee2502762ec015db6a56791637b603b2fb9f93db0e6c8d9db"
- * MD5: "0550e266e7acf0cad62eecd57969f7c0"
- * SHA1: "250df5f7bd4ee973eb22566f240bf34c46c91a4e"
- * SHA512: "dcd0f45cc1ba327e66e24faa6d9ccc29ac107d711c93029a70ef39728c8941801a1a8e3cec3710e3765e7932d0783c32434381e1b8b18766b3c26cf7f937276a"
- * CRC32: "D69BA7FB"
- * SSDEEP: "6144:c7e7o448uVkIqLUkoW5HFZmmVNNJU2Q9WEded8Pv:meoyprhmmVnJqsd8Pv"
- * Process Execution:
- * Executed Commands:
- * Signatures Detected:
- "Description": "File has been identified by 10 Antiviruses on VirusTotal as malicious",
- "Details":
- "Bkav": "HW32.Packed."
- "Invincea": "heuristic"
- "APEX": "Malicious"
- "McAfee-GW-Edition": "BehavesLike.Win32.ObfusRansom.dc"
- "Microsoft": "Trojan:Win32/Wacatac.B!ml"
- "Endgame": "malicious (moderate confidence)"
- "Acronis": "suspicious"
- "AVG": "FileRepMalware"
- "CrowdStrike": "win/malicious_confidence_60% (D)"
- "Qihoo-360": "HEUR/QVM20.1.6C8B.Malware.Gen"
- * Started Service:
- * Mutexes:
- * Modified Files:
- * Deleted Files:
- * Modified Registry Keys:
- * Deleted Registry Keys:
- * DNS Communications:
- * Domains:
- * Network Communication - ICMP:
- * Network Communication - HTTP:
- * Network Communication - SMTP:
- * Network Communication - Hosts:
- * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment