834Exes_913ed59c6e5bd51454bdf733e3a2cd32_exe_2019-09-03_15_30.txt

* ID: 834
* MalFamily: "Trickbot"

* MalScore: 10.0

* File Name: "Exes_913ed59c6e5bd51454bdf733e3a2cd32.exe"
* File Size: 602232
* File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
* SHA256: "8d9186a4637dc720da61203bc7ba9c3da700895495806b181139ed7546f29b0a"
* MD5: "913ed59c6e5bd51454bdf733e3a2cd32"
* SHA1: "25ecf94543f32844b694b3607e883ebadd97d6af"
* SHA512: "70c5d87c251ca8fa3f49d72ecd0d02e27a6fee4ca83121a9f418301dff09d5eb28fd485d6fea1aeee5e37b5ae1a0ea3625f42d0f0ec906d5fa595d243b26131f"
* CRC32: "4F71103E"
* SSDEEP: "12288:HoTBeHFMnV1mCVGEhSQpiVOnAZupYgp9JebiAiiIch7Ay:4EyV04QiAuK6Gh7Ay"

* Process Execution:

* Executed Commands:

* Signatures Detected:

        "Description": "File has been identified by 14 Antiviruses on VirusTotal as malicious",
        "Details":

                "McAfee": "Artemis!913ED59C6E5B"


                "TrendMicro": "TrojanSpy.Win32.TRICKBOT.SMKA"


                "Symantec": "Trojan Horse"


                "ESET-NOD32": "a variant of Win32/GenKryptik.DRJL"


                "APEX": "Malicious"


                "DrWeb": "Trojan.DownLoad4.11971"


                "Invincea": "heuristic"


                "McAfee-GW-Edition": "Artemis"


                "Webroot": "W32.Trojan.Gen"


                "Fortinet": "W32/Kryptik.GVXY!tr"


                "Microsoft": "Trojan:Win32/TrickBot.I"


                "Panda": "Trj/GdSda.A"


                "TrendMicro-HouseCall": "TrojanSpy.Win32.TRICKBOT.SMKA"


                "Rising": "Dropper.Agent!8.2F (TFE:5:ABjGvFd6wvN)"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: