Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6403_us | Sept. 17, 2023, 4:20 p.m. | Sept. 17, 2023, 4:25 p.m. |
-
ss41.exe "C:\Users\test22\AppData\Local\Temp\ss41.exe"
1508
Name | Response | Post-Analysis Lookup |
---|---|---|
z.nnnaajjjgc.com | 156.236.72.121 |
Suricata Alerts
Suricata TLS
No Suricata TLS
pdb_path | dfrgui.pdb |
resource name | MUI |
resource name | PNG |
Bkav | W32.RoyaXiwapkJ.Trojan |
Elastic | malicious (high confidence) |
McAfee | GenericRXAA-FA!6F75FDD73946 |
Malwarebytes | Generic.Malware/Suspicious |
Alibaba | TrojanDownloader:Win32/Fabookie.b67173c1 |
CrowdStrike | win/malicious_confidence_100% (W) |
VirIT | Trojan.Win64.Agent.UI |
Symantec | ML.Attribute.HighConfidence |
ESET-NOD32 | a variant of Win64/TrojanDownloader.Agent.AER.gen |
APEX | Malicious |
Kaspersky | HEUR:Trojan.Win32.Fabookie.pef |
Avast | Win64:Evo-gen [Trj] |
Tencent | Win64.Trojan-Downloader.Oader.Umhl |
DrWeb | Trojan.DownLoader45.61795 |
McAfee-GW-Edition | BehavesLike.Win64.Dropper.hh |
Sophos | Mal/Generic-S |
Gridinsoft | Trojan.Win64.Gen.bot |
Microsoft | Trojan:Win64/Vigorf.A |
ZoneAlarm | HEUR:Trojan.Win32.Fabookie.pef |
Detected | |
AhnLab-V3 | Trojan/Win.Generic.C5448243 |
Cylance | unsafe |
Panda | Trj/Chgt.AD |
Rising | Downloader.Agent!8.B23 (TFE:2:EmnL0dJ0FNC) |
Ikarus | Win32.Outbreak |
AVG | Win64:Evo-gen [Trj] |
DeepInstinct | MALICIOUS |