Loki_0741fc65f903f066812c6610ccdbae05_exe_2019-07-10_06_30.txt

* MalFamily: "Malicious"

* MalScore: 10.0

* File Name: "Loki_0741fc65f903f066812c6610ccdbae05.exe"
* File Size: 258481
* File Type: "PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive"
* SHA256: "6cdd2cb5f48a14790d9f294ff1b9327fc6127758b232b5dacf9754fa0ad4e415"
* MD5: "0741fc65f903f066812c6610ccdbae05"
* SHA1: "e059eae77d8d65a725f4c20ed778ec5263713151"
* SHA512: "c05f08cb8b303eb6fb12cfcd0432e99ad73fa0a299a86302f3c919831812c9238559c4d7036b544266a0f3abea0ea47d79ef87d529af98f599f6dfd5f066af46"
* CRC32: "7F7E92EF"
* SSDEEP: "3072:QYrClLswbDkrcAobmEYy+7URAJx/TjT90zW5G57ZD97+O2yxOWC9jlnREgTCCFaP:Q7e0mE48ALgW5+ZD9h2yxijlXC6S4hPe"

* Process Execution:

* Executed Commands:

* Signatures Detected:

        "Description": "File has been identified by 11 Antiviruses on VirusTotal as malicious",
        "Details":

                "Bkav": "HW32.Packed."


                "FireEye": "Generic.mg.0741fc65f903f066"


                "Cybereason": "malicious.77d8d6"


                "Invincea": "heuristic"


                "APEX": "Malicious"


                "McAfee-GW-Edition": "BehavesLike.Win32.ObfusRansom.dc"


                "SentinelOne": "DFI - Suspicious PE"


                "Endgame": "malicious (high confidence)"


                "AhnLab-V3": "Malware/Win32.Generic.C2437609"


                "CrowdStrike": "win/malicious_confidence_70% (W)"


                "Qihoo-360": "HEUR/QVM20.1.6C67.Malware.Gen"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: