Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6403_us | Oct. 4, 2023, 10:18 a.m. | Oct. 4, 2023, 10:24 a.m. |
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\clip64.dll,??4CClipperDLL@@QAEAAV0@$$QAV0@@Z
1872 -
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\clip64.dll,Main
2068 -
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\clip64.dll,??4CClipperDLL@@QAEAAV0@ABV0@@Z
1960 -
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\clip64.dll,
2172
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
No hosts contacted. |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
pdb_path | D:\Mktmp\Amadey\ClipperDLL\Release\CLIPPERDLL.pdb |
Bkav | W32.NataDecoAAT.Trojan |
Lionic | Trojan.Win32.Agent.Y!c |
MicroWorld-eScan | Gen:Variant.Zusy.446682 |
CAT-QuickHeal | Trojan.GenericPMF.S29595454 |
McAfee | Trojan-FUUW!BBACDE1C1D68 |
Malwarebytes | Amadey.Trojan.Downloader.DDS |
Zillya | Trojan.Sdum.Win32.9748 |
Sangfor | Trojan.Win32.Amadey.Viyw |
CrowdStrike | win/malicious_confidence_90% (W) |
Alibaba | Trojan:Win32/Amadey.6a0034c6 |
K7GW | Riskware ( 00584baa1 ) |
K7AntiVirus | Riskware ( 00584baa1 ) |
Arcabit | Trojan.Zusy.D6D0DA |
VirIT | Trojan.Win32.Genus.NMA |
Cyren | W32/Agent.GPBN-4848 |
Symantec | ML.Attribute.HighConfidence |
Elastic | malicious (high confidence) |
ESET-NOD32 | Win32/Agent.AFGA |
Cynet | Malicious (score: 99) |
APEX | Malicious |
ClamAV | Win.Malware.Zusy-10001339-0 |
Kaspersky | HEUR:Trojan.Win32.Agent.gen |
BitDefender | Gen:Variant.Zusy.446682 |
NANO-Antivirus | Trojan.Win32.Clipper.juivsg |
SUPERAntiSpyware | Trojan.Agent/Gen-Kryptik |
Avast | Win32:BotX-gen [Trj] |
Tencent | Malware.Win32.Gencirc.10be3141 |
TACHYON | Trojan/W32.Agent.91136.ADV |
Emsisoft | Gen:Variant.Zusy.446682 (B) |
DrWeb | Trojan.ClipSpy.85 |
VIPRE | Gen:Variant.Zusy.446682 |
TrendMicro | TROJ_GEN.R002C0DJ323 |
McAfee-GW-Edition | Trojan-FUUW!BBACDE1C1D68 |
FireEye | Gen:Variant.Zusy.446682 |
Sophos | Troj/Amadey-K |
Ikarus | Trojan.Win32.Amadey |
Jiangmin | Trojan.Agent.ejvu |
Webroot | W32.Trojan.Gen |
Avira | TR/Agent.olkqv |
Antiy-AVL | Trojan[Backdoor]/Win32.Convagent |
Microsoft | Trojan:Win32/Amadey!ic |
ViRobot | Trojan.Win.Z.Zusy.91136.AZ |
ZoneAlarm | HEUR:Trojan.Win32.Agent.gen |
GData | Win32.Trojan.Amadey.C |
Detected | |
AhnLab-V3 | Trojan/Win.Generic.R572736 |
VBA32 | Trojan.Sdum |
ALYac | Gen:Variant.Zusy.446682 |
MAX | malware (ai score=87) |
Cylance | unsafe |