Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6401 | April 12, 2021, 11:14 a.m. | April 12, 2021, 11:16 a.m. |
-
uko.exe "C:\Users\test22\AppData\Local\Temp\uko.exe"
1896
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
164.124.101.2 | Active | Moloch |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
section | .symtab |
Elastic | malicious (high confidence) |
Cylance | Unsafe |
ESET-NOD32 | a variant of WinGo/GoCLR.A |
APEX | Malicious |
Avast | Win64:Trojan-gen |
ClamAV | Win.Malware.Bulz-9847817-0 |
Kaspersky | UDS:DangerousObject.Multi.Generic |
McAfee-GW-Edition | BehavesLike.Win64.Generic.vh |
Sophos | ML/PE-A |
Ikarus | Trojan.CobaltStrike |
Jiangmin | Trojan.Cobalt.ic |
eGambit | Unsafe.AI_Score_100% |
Microsoft | Trojan:Win32/Wacatac.B!ml |
Cynet | Malicious (score: 100) |
McAfee | Artemis!40367F496F45 |
Malwarebytes | Malware.AI.4239237678 |
Fortinet | W64/GoCLR.A!tr |
AVG | Win64:Trojan-gen |
CrowdStrike | win/malicious_confidence_60% (D) |