821Exes_73c33154d589546549f1fa2140019ca3_jpg_2019-09-03_15_30.txt

* ID: 821
* MalFamily: ""

* MalScore: 3.75

* File Name: "Exes_73c33154d589546549f1fa2140019ca3.jpg"
* File Size: 842240
* File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
* SHA256: "16152fb9324e2d5e627431a65745c550c4dca40c5fb870319aa2e687cb1e7edf"
* MD5: "73c33154d589546549f1fa2140019ca3"
* SHA1: "733d1269acddbe62617d3a5ed411d27e40a1a1e6"
* SHA512: "9013f151db27159d2d3161d29132efbb6907ebd55eaac152e6946b7b790d6747bc09c683d92bf7197fb77e2442ac0d2f9c1a58c8af718a88412ef050c9d79ed1"
* CRC32: "F93EC6CD"
* SSDEEP: "12288:NOmeh4c6MYRUOMvnashygy8BfssWBvVY/9SV2ppETYy8TzlK67E4hpgMfx:NC4c6MFh8sWBvV8FKYVlKi/p"

* Process Execution:

* Executed Commands:

* Signatures Detected:

        "Description": "File has been identified by 9 Antiviruses on VirusTotal as malicious",
        "Details":

                "TrendMicro": "TrojanSpy.Win32.TRICKBOT.SMKA"


                "APEX": "Malicious"


                "Endgame": "malicious (high confidence)"


                "AhnLab-V3": "Unwanted/Win32.Agent.R289865"


                "ESET-NOD32": "a variant of Win32/GenKryptik.DRVY"


                "TrendMicro-HouseCall": "TrojanSpy.Win32.TRICKBOT.SMKA"


                "Rising": "Trojan.Casur!8.10E51 (TFE:5:Od3el7JnfgC)"


                "Ikarus": "Trojan.Win32.Trickbot"


                "Fortinet": "W32/GenKryptik.DRVY!tr"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: