849Exes_175054bbd6951f7a34e6fc7490994bb2_exe_2019-09-03_18_30.txt

* ID: 849
* MalFamily: "Malicious"

* MalScore: 10.0

* File Name: "Exes_175054bbd6951f7a34e6fc7490994bb2.exe"
* File Size: 677376
* File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
* SHA256: "a33a0c1279fe12e4d838173e90b80b5e6d59f0e0b1e9d59dd36312874ec96243"
* MD5: "175054bbd6951f7a34e6fc7490994bb2"
* SHA1: "b5fbdcc8610745a5db5795cbba43301bf06ae047"
* SHA512: "4b432dc76b311af14c1634774659ed5a2d79fb4dfcd5afb67d5e761258011d048c451285b954b30cf376b68cd8317679f9bc97718c67932c583573b39c130feb"
* CRC32: "406E8BF3"
* SSDEEP: "12288:xOQezYBAkiEK/jfG3JI0YXvL7VIUMbHdX9WBRktzx4urElCccP:xczCdiEK/jGXqLhqNQAzCurrccP"

* Process Execution:
    "KKIOX2W.exe"


* Executed Commands:

* Signatures Detected:

        "Description": "File has been identified by 38 Antiviruses on VirusTotal as malicious",
        "Details":

                "MicroWorld-eScan": "Trojan.GenericKD.32349885"


                "FireEye": "Generic.mg.175054bbd6951f7a"


                "Qihoo-360": "Win32/Trojan.fc8"


                "McAfee": "GenericRXIL-CZ!175054BBD695"


                "Cylance": "Unsafe"


                "CrowdStrike": "win/malicious_confidence_100% (W)"


                "Alibaba": "Trojan:Win32/Malmail.ali1000112"


                "K7GW": "Trojan ( 005551941 )"


                "Arcabit": "Trojan.Generic.D1ED9EBD"


                "Cyren": "W32/MSIL_Kryptik.OM.gen!Eldorado"


                "ESET-NOD32": "a variant of MSIL/Injector.UMM"


                "APEX": "Malicious"


                "Paloalto": "generic.ml"


                "Kaspersky": "UDS:DangerousObject.Multi.Generic"


                "BitDefender": "Trojan.GenericKD.32349885"


                "Avast": "Win32:TrojanX-gen Trj"


                "Ad-Aware": "Trojan.GenericKD.32349885"


                "Sophos": "Mal/Generic-S"


                "DrWeb": "Trojan.PWS.Siggen2.28960"


                "Invincea": "heuristic"


                "McAfee-GW-Edition": "BehavesLike.Win32.Generic.jh"


                "Trapmine": "suspicious.low.ml.score"


                "Emsisoft": "Trojan.GenericKD.32349885 (B)"


                "SentinelOne": "DFI - Suspicious PE"


                "Fortinet": "MSIL/Injector.UMM!tr"


                "Endgame": "malicious (high confidence)"


                "Microsoft": "Trojan:Win32/Ditertag.A"


                "AegisLab": "Trojan.Multi.Generic.4!c"


                "ZoneAlarm": "UDS:DangerousObject.Multi.Generic"


                "Acronis": "suspicious"


                "ALYac": "Trojan.GenericKD.32349885"


                "MAX": "malware (ai score=100)"


                "Malwarebytes": "Trojan.RMCrypt.MSIL.Generic"


                "TrendMicro-HouseCall": "TROJ_GEN.R002H0CI119"


                "Ikarus": "Trojan.MSIL.Injector"


                "GData": "Trojan.GenericKD.32349885"


                "AVG": "Win32:TrojanX-gen Trj"


                "Cybereason": "malicious.861074"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: