Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6401 | March 2, 2023, 9:35 a.m. | March 2, 2023, 9:43 a.m. |
-
-
bakfhb.exe "C:\Users\test22\AppData\Local\Temp\bakfhb.exe" C:\Users\test22\AppData\Local\Temp\ksdpa.dw
2652-
bakfhb.exe "C:\Users\test22\AppData\Local\Temp\bakfhb.exe"
2704
-
-
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
No hosts contacted. |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
section | .ndata |
file | C:\Users\test22\AppData\Local\Temp\bakfhb.exe |
file | C:\Users\test22\AppData\Roaming\luqaajee\njjsccxhqq.exe |
file | C:\Users\test22\AppData\Local\Temp\bakfhb.exe |
file | C:\Users\test22\AppData\Local\Temp\bakfhb.exe |
reg_key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\mvvrbbkgp | reg_value | C:\Users\test22\AppData\Roaming\luqaajee\njjsccxhqq.exe "C:\Users\test22\AppData\Local\Temp\bakfhb.exe" C:\Users\test22\AppData\L |
Bkav | W32.AIDetectNet.01 |
Lionic | Trojan.Win32.Agent.tshg |
Elastic | malicious (high confidence) |
MicroWorld-eScan | Trojan.Garf.Gen.6 |
FireEye | Generic.mg.15ee8e51c501df26 |
ALYac | Trojan.Garf.Gen.6 |
Cylance | unsafe |
CrowdStrike | win/malicious_confidence_100% (D) |
Arcabit | Trojan.Garf.Gen.6 |
Cyren | W32/Injector.BKA.gen!Eldorado |
Symantec | Packed.NSISPacker!g14 |
ESET-NOD32 | a variant of Win32/Injector.ESSW |
APEX | Malicious |
Paloalto | generic.ml |
Kaspersky | UDS:DangerousObject.Multi.Generic |
BitDefender | Trojan.Garf.Gen.6 |
Avast | FileRepMalware [Misc] |
Sophos | Generic ML PUA (PUA) |
DrWeb | Trojan.Loader.1322 |
VIPRE | Trojan.Garf.Gen.6 |
McAfee-GW-Edition | BehavesLike.Win32.Dropper.cc |
Trapmine | malicious.moderate.ml.score |
Emsisoft | Trojan.Garf.Gen.6 (B) |
Ikarus | Trojan.Inject |
MAX | malware (ai score=85) |
Microsoft | TrojanSpy:Win32/AveMaria.BM |
GData | Trojan.Garf.Gen.6 |
Detected | |
McAfee | Artemis!15EE8E51C501 |
Rising | Trojan.Injector!8.C4 (CLOUD) |
Fortinet | W32/Injector.ESSR!tr |
BitDefenderTheta | Gen:NN.ZexaF.36308.gqW@aCCN3rb |
AVG | FileRepMalware [Misc] |
Cybereason | malicious.f9070b |