paladin316

Exes_a340183f02ab49682cf0602253a7969e_exe_2019-07-13_21_30.txt

Jul 13th, 2019
2,106
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.13 KB | None | 0 0
  1.  
  2. * MalFamily: "Malicious"
  3.  
  4. * MalScore: 10.0
  5.  
  6. * File Name: "Exes_a340183f02ab49682cf0602253a7969e.exe"
  7. * File Size: 776192
  8. * File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  9. * SHA256: "be2bf387cbc44217e0967b36b5f44a740fa609c7fa177ff844b4a97f5095110a"
  10. * MD5: "a340183f02ab49682cf0602253a7969e"
  11. * SHA1: "95ea7ca89560f550c17f80c4368ee84f146064e2"
  12. * SHA512: "e3fe72819b534c93d0827efc98691d9a7cb67aebf16dde00cffdcb6750e0ab47e3d2fa679dc9488ab3a6230d1c439bb53e9968e48be5af15eaf8395aa237c973"
  13. * CRC32: "074EEBF2"
  14. * SSDEEP: "12288:r9nnoHdnlPMwQwPFTJywKSVU4XVc5dhU3DE8UUt5mcpRK0osY3t:r9qddVUSVU8VUO5U1czNoN"
  15.  
  16. * Process Execution:
  17.  
  18. * Executed Commands:
  19.  
  20. * Signatures Detected:
  21.  
  22. "Description": "File has been identified by 26 Antiviruses on VirusTotal as malicious",
  23. "Details":
  24.  
  25. "FireEye": "Generic.mg.a340183f02ab4968"
  26.  
  27.  
  28. "McAfee": "Artemis!A340183F02AB"
  29.  
  30.  
  31. "Cylance": "Unsafe"
  32.  
  33.  
  34. "AegisLab": "Trojan.Multi.Generic.4!c"
  35.  
  36.  
  37. "Alibaba": "Trojan:Win32/Kryptik.8738b02c"
  38.  
  39.  
  40. "Symantec": "ML.Attribute.HighConfidence"
  41.  
  42.  
  43. "APEX": "Malicious"
  44.  
  45.  
  46. "Paloalto": "generic.ml"
  47.  
  48.  
  49. "Kaspersky": "UDS:DangerousObject.Multi.Generic"
  50.  
  51.  
  52. "Avast": "Win32:Malware-gen"
  53.  
  54.  
  55. "Endgame": "malicious (high confidence)"
  56.  
  57.  
  58. "Invincea": "heuristic"
  59.  
  60.  
  61. "McAfee-GW-Edition": "BehavesLike.Win32.Ursnif.bh"
  62.  
  63.  
  64. "Trapmine": "malicious.high.ml.score"
  65.  
  66.  
  67. "SentinelOne": "DFI - Suspicious PE"
  68.  
  69.  
  70. "Webroot": "W32.Trojan.Gen"
  71.  
  72.  
  73. "Avira": "HEUR/AGEN.1041064"
  74.  
  75.  
  76. "Microsoft": "Trojan:Win32/Wacatac.B!ml"
  77.  
  78.  
  79. "ZoneAlarm": "UDS:DangerousObject.Multi.Generic"
  80.  
  81.  
  82. "Acronis": "suspicious"
  83.  
  84.  
  85. "ESET-NOD32": "a variant of Win32/Kryptik.GUOS"
  86.  
  87.  
  88. "Rising": "[email protected] (RDML:UeIeuLzph26cg8kpK3QH0g)"
  89.  
  90.  
  91. "Ikarus": "Trojan.Win32.Crypt"
  92.  
  93.  
  94. "Fortinet": "W32/Kryptik.GUOS!tr"
  95.  
  96.  
  97. "AVG": "Win32:Malware-gen"
  98.  
  99.  
  100. "CrowdStrike": "win/malicious_confidence_90% (W)"
  101.  
  102.  
  103.  
  104.  
  105.  
  106. * Started Service:
  107.  
  108. * Mutexes:
  109.  
  110. * Modified Files:
  111.  
  112. * Deleted Files:
  113.  
  114. * Modified Registry Keys:
  115.  
  116. * Deleted Registry Keys:
  117.  
  118. * DNS Communications:
  119.  
  120. * Domains:
  121.  
  122. * Network Communication - ICMP:
  123.  
  124. * Network Communication - HTTP:
  125.  
  126. * Network Communication - SMTP:
  127.  
  128. * Network Communication - Hosts:
  129.  
  130. * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment