paladin316

AZORult_3e6d11d2f873fdcd1b06ae904b9b8601_iso_2019-07-10_09_30.txt

Jul 10th, 2019
2,108
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.50 KB | None | 0 0
  1.  
  2. * MalFamily: "Eafh"
  3.  
  4. * MalScore: 10.0
  5.  
  6. * File Name: "AZORult_3e6d11d2f873fdcd1b06ae904b9b8601.iso"
  7. * File Size: 1284096
  8. * File Type: "ISO 9660 CD-ROM filesystem data 'crypted'"
  9. * SHA256: "230de021dc35091206cf4c5c55cc24482ed56364af5ff4853b119749237e6fdf"
  10. * MD5: "3e6d11d2f873fdcd1b06ae904b9b8601"
  11. * SHA1: "a1aa6629a0ef0ddfdb07d1c04a8d3b3ae38e5d69"
  12. * SHA512: "003ab93d2210fbf93faddce47515f1d6b24b2bace71217d72b6d6bcf9c167b8514a13fe8e1171328ffb4065dc494c5d34a6652f3367ff495c3ede791c6b810f1"
  13. * CRC32: "EBD2ADEC"
  14. * SSDEEP: "24576:tAHnh+eWsN3skA4RV1Hom2KXMmHaJ0AA/V15:Mh+ZkldoPK8YauHR"
  15.  
  16. * Process Execution:
  17. "isoburn.exe"
  18.  
  19.  
  20. * Executed Commands:
  21.  
  22. * Signatures Detected:
  23.  
  24. "Description": "File has been identified by 17 Antiviruses on VirusTotal as malicious",
  25. "Details":
  26.  
  27. "FireEye": "Trojan.Agent.EAFH"
  28.  
  29.  
  30. "McAfee": "Artemis!9B5E7BE263D6"
  31.  
  32.  
  33. "AegisLab": "Trojan.Win32.Eafh.4!c"
  34.  
  35.  
  36. "Arcabit": "Trojan.Agent.EAFH"
  37.  
  38.  
  39. "Symantec": "Trojan.Gen.MBT"
  40.  
  41.  
  42. "BitDefender": "Trojan.Agent.EAFH"
  43.  
  44.  
  45. "Emsisoft": "Trojan.Agent.EAFH (B)"
  46.  
  47.  
  48. "DrWeb": "Trojan.PWS.Banker1.29984"
  49.  
  50.  
  51. "Invincea": "heuristic"
  52.  
  53.  
  54. "McAfee-GW-Edition": "Artemis!9B5E7BE263D6"
  55.  
  56.  
  57. "Cyren": "W32/AutoIt.IT.gen!Eldorado"
  58.  
  59.  
  60. "MAX": "malware (ai score=80)"
  61.  
  62.  
  63. "Microsoft": "Trojan:Win32/Sonbokli.A!cl"
  64.  
  65.  
  66. "GData": "Trojan.Agent.EAFH (2x)"
  67.  
  68.  
  69. "ESET-NOD32": "a variant of Win32/Injector.Autoit.ECZ"
  70.  
  71.  
  72. "Rising": "Trojan.Win32.Agent_.sa (CLASSIC)"
  73.  
  74.  
  75. "Ikarus": "Trojan-Spy.Keylogger.AgentTesla"
  76.  
  77.  
  78.  
  79.  
  80.  
  81. * Started Service:
  82.  
  83. * Mutexes:
  84. "CicLoadWinStaWinSta0",
  85. "Local\\MSCTF.CtfMonitorInstMutexDefault1"
  86.  
  87.  
  88. * Modified Files:
  89.  
  90. * Deleted Files:
  91.  
  92. * Modified Registry Keys:
  93.  
  94. * Deleted Registry Keys:
  95.  
  96. * DNS Communications:
  97.  
  98. * Domains:
  99.  
  100. * Network Communication - ICMP:
  101.  
  102. * Network Communication - HTTP:
  103.  
  104. * Network Communication - SMTP:
  105.  
  106. * Network Communication - Hosts:
  107.  
  108. * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment